In Apache HTTP Server version 2.4.61 a medium severity vulnerability CVE-2024-40725 was detected. This vulnerability allows attackers to disclose local source code content due to improper handling of legacy content-type configurations. To fix this issue, users are recommended to upgrade to version 2.4.62. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-40725.
Read more Application Development
In Apache HTTP Server versions 2.4.0 through 2.4.61 a critical severity vulnerability CVE-2024-40898 was detected. This vulnerability allows attackers to steal sensitive info by tricking the server. To fix this problem, users should upgrade Apache HTTP Server to version 2.4.62. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-40898.
Read more Application Development
In Apache HTTP Server versions 2.4.0 through 2.4.59 a critical severity vulnerability CVE-2024-38477 was detected. This vulnerability allows attackers to crash the Apache HTTP Server by sending a specially crafted request that triggers a null pointer dereference, causing a denial of service. To fix this problem, users should upgrade Apache HTTP Server to version 2.4.60. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-38477.
Read more Application Development
In OpenShift environments using Aardvark-dns versions 1.12.0 and 1.12.1 a high severity vulnerability CVE-2024-8418 was detected. This vulnerability allows attackers to exploit serial processing of TCP DNS queries, causing a denial of service. Malicious clients can keep a TCP connection open indefinitely, leading to timeouts for other DNS queries and disrupting service for all containers using Aardvark-dns. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-8418.
Read more Developer Tools
In Flask-AppBuilder versions prior to 4.5.1 a low severity vulnerability CVE-2024-45314 was detected. This issue allows multiple users or processes to share computer resources, such as CPU, memory, or storage. When resources are shared, it increases the risk of interference and security vulnerabilities. To fix this issue, users must upgrade to version 4.5.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-45314.
In Java Technology Edition versions 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 a medium severity vulnerability CVE-2024-27267 was detected. This vulnerability allows a remote denial of service, caused by a race condition in the management of ORB listener threads. To fix this issue, users must upgrade to the latest version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-27267.
Read more Application Development
In Rocket.Chat Electron desktop application versions through 6.3.4 a low severity vulnerability CVE-2024-45621 was detected. This vulnerability allows attackers to execute stored XSS via links in an uploaded file. The issue arises from the failure to use a separate browser when encountering third-party external actions from PDF documents. Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-45621.
Read more Communication
In Python versions before 3.13.0rc2 a medium severity vulnerability CVE-2024-6232 was detected. This vulnerability, affecting the CPython implementation, allows attackers to trigger ReDoS (Regular Expression Denial of Service) by using specifically-crafted tar archives. The issue occurs due to excessive backtracking during tarfile.TarFile header parsing. To address this issue, update to Python 3.13.0rc2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-6232.
Read more Application Development
In Keycloak versions <= 24.0.3 a medium severity vulnerability CVE-2024-4629 was detected. This vulnerability allows attackers to guess passwords more quickly than intended by exploiting delays in the system’s login attempts. To fix this problem, users should upgrade Keycloak to version 24.0.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-4629.
Read more Security