Vulnerability & Exploit Database

Red Hat OpenShift: CVE-2024-3177: kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

pfSense: pfSense-SA-24_04.webgui: XSS vulnerability in vendor files used by the WebGUI

pfSense: pfSense-SA-24_02.webgui: Stored XSS vulnerability in the WebGUI

pfSense: pfSense-SA-24_03.webgui: Multiple XSS vulnerabilities in the WebGUI

Debian: CVE-2024-3177: kubernetes -- security update

SUSE: CVE-2024-3177: SUSE Linux Security Advisory

SUSE: CVE-2024-32650: SUSE Linux Security Advisory

Oracle Linux: CVE-2024-32462: ELSA-2024-3959: flatpak security update (IMPORTANT) (Multiple Advisories)

Alma Linux: CVE-2024-32462: Important: flatpak security update (Multiple Advisories)

CentOS Linux: CVE-2024-32462: Important: flatpak security update (CESA-2024:3980)

Rocky Linux: CVE-2024-32462: flatpak (Multiple Advisories)

Alpine Linux: CVE-2024-32462: Argument Injection

SUSE: CVE-2024-32462: SUSE Linux Security Advisory

Gentoo Linux: CVE-2024-32462: Flatpak: Sandbox Escape

Debian: CVE-2024-32462: flatpak -- security update

Red Hat: CVE-2024-32462: flatpak: sandbox escape via RequestBackground portal (Multiple Advisories)

Amazon Linux AMI 2: CVE-2024-32462: Security patch for flatpak (ALAS-2024-2538)

Debian: CVE-2024-26891: linux -- security update

Amazon Linux AMI 2: CVE-2024-26859: Security patch for kernel (Multiple Advisories)

Red Hat: CVE-2024-26901: kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Multiple Advisories)