Schwachstellen, die jetzt zählen.

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6611-1 imagemagick - security update

DSA-6612-1 symfony - security update

DSA-6611-1 imagemagick - security update

ImageMagick: Mehrere Schwachstellen

DSA-6611-1 imagemagick - security update

DSA-6610-1 xen - security update

DSA-6610-1 xen - security update

openusd: openusd: Arbitrary code execution via double-free in crate file parsing

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of USDC and USDZ files. The issue results from the lack of validating the…

libwebsockets: libwebsockets: arbitrary code execution via crafted MQTT PUBACK packets

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated…

mlflow: mlflow: Information disclosure via SSRF in get-artifacts

mlflow: mlflow: Arbitrary code execution via untrusted SHAP model deserialization

mlflow: mlflow: Privilege escalation via missing authorization in request handlers

mlflow: mlflow: Privilege escalation via missing authorization in get_endpoints

mlflow: mlflow: Information disclosure via missing authorization in Tracking Server Jobs

mlflow: mlflow: Arbitrary code execution via untrusted data deserialization in PickleEvaluationArtifact

perl-cgi: perl-cgi: Denial of Service via truncated request body

Red Hat Enterprise Linux: Mehrere Schwachstellen

perl-cgi: perl-cgi: Denial of Service via unenforced request and upload limits

perl-CGI: perl-CGI: HTML injection via unescaped comment delimiter

perl-cgi: perl-cgi: Content-Disposition parameter injection via unescaped double quotes in attachment filenames

perl-cgi: perl-cgi: Denial of Service via improper argument handling in uploadInfo

perl-cgi: perl-cgi: Denial of Service via unescaped regular expression injection in scrolling_list

perl-cgi: perl-cgi: Cookie attribute injection via unvalidated parameters

perl-CGI: perl-CGI: Cross-site scripting via unescaped apostrophes in generated URLs

Red Hat Enterprise Linux: Mehrere Schwachstellen

perl-cgi: perl-cgi: Security feature bypass via untainted request parameters

Red Hat Enterprise Linux: Mehrere Schwachstellen

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames