Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1231795 * bsc#1233307 Cross-References: * CVE-2024-11168
* bsc#1233773 Cross-References: * CVE-2024-10524
* bsc#1233650 * bsc#1233695 Cross-References: * CVE-2024-11691
* bsc#1233815 Cross-References: * CVE-2024-53849
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-44308
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-44308
* bsc#1233593 * bsc#1233594 Cross-References: * CVE-2024-11595
* bsc#1232072 * bsc#1233706 Cross-References: * CVE-2024-53899
Buffer overflow in socks proxy code in glib
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access…
Select list elements could be shown over another site. (CVE-2024-11692) CSP Bypass and XSS Exposure via Web Compatibility Shims. (CVE-2024-11694) URL Bar Spoof…
Select list elements could be shown over another site. (CVE-2024-11692) CSP Bypass and XSS Exposure via Web Compatibility Shims. (CVE-2024-11694) URL Bar Spoof…
* bsc#1231795 * bsc#1233307 Cross-References: * CVE-2024-11168
* bsc#1233668 Cross-References: * CVE-2024-52804
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to an XXE vulnerability when loading an (untrusted) XML document.
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to a XXE vulnerability when loading an (untrusted) XML document.
* bsc#1225429 * bsc#1225733 * bsc#1229273 * bsc#1229553
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521
* bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013
An update that fixes two vulnerabilities is now available.
Multiple vulnerabilities were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to injection of arbitrar…
Two issues have been found in editorconfig-core, a coding style indenter for all editors. Both issues are related to buffer overflows in different locations.
