RHEL 8 : tomcat (RHSA-2024:0125)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0125 advisory. URL Redirection to Untrusted Site (' ...

Continue Reading
Amazon Linux 2 : resteasy-base (ALAS-2024-2398)

The version of resteasy-base installed on the remote host is prior to 3.0.6-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2398 advisory. A flaw was found ...

Continue Reading
Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2024-471)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-471 advisory. Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from ...

Continue Reading
Siemens SCALANCE OpenSSL NULL Pointer Dereference (CVE-2023-0401)

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but ...

Continue Reading
KB5034130: Windows 11 version 22H2 Security Update (January 2024)

The remote Windows host is missing security update 5034130. It is, therefore, affected by multiple vulnerabilities Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654) BitLoc ...

Continue Reading
Amazon Linux 2 : jetty (ALAS-2024-2408)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2408 advisory. For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for reques ...

Continue Reading
KB5034123: Windows 11 version 22H2 Security Update (January 2024)

The remote Windows host is missing security update 5034123. It is, therefore, affected by multiple vulnerabilities Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654) BitLoc ...

Continue Reading
KB5034184: Windows Server 2012 Security Update (January 2024)

The remote Windows host is missing security update 5034184. It is, therefore, affected by multiple vulnerabilities Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654) Window ...

Continue Reading

Back to Main

Subscribe for the latest news: