800xA, Control Software For AC 800M Security Vulnerabilities

CVE-2024-28147 Unrestricted Upload of Files in edu-sharing

An authenticated user can upload arbitrary files in the upload function for collection preview images. An attacker may upload an HTML file that includes malicious JavaScript code which will be executed if a user visits the direct URL of the collection preview image (Stored Cross Site...

samsung-service-fehlersuche.samsung.de Cross Site Scripting vulnerability OBB-3936873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

repositorio.uema.br Cross Site Scripting vulnerability OBB-3936872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

novokosino.3dn.ru Cross Site Scripting vulnerability OBB-3936871

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

maxim-averin.ucoz.ru Cross Site Scripting vulnerability OBB-3936869

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

kprf35.ucoz.ru Cross Site Scripting vulnerability OBB-3936868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

kino.trc-forum.ru Cross Site Scripting vulnerability OBB-3936867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

archives.polemia.com Cross Site Scripting vulnerability OBB-3936863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

1.mukcbs.org Cross Site Scripting vulnerability OBB-3936861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

Cyber espionage groups associated with China have been linked to a long-running campaign that has infiltrated several telecom operators located in a single Asian country at least since 2021. "The attackers placed backdoors on the networks of targeted companies and also attempted to steal...

oriohome.gr Cross Site Scripting vulnerability OBB-3936859

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

TikTok facing fresh lawsuit in US over children’s privacy

The Federal Trade Commission (FTC) has announced it's referred a complaint against TikTok and parent company ByteDance to the Department of Justice. The investigation originally focused on Musical.ly which was acquired by ByteDance on November 10, 2017, and merged it into TikTok. The FTC started a....

CVE-2024-34693

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it's possible for...

CVE-2024-34693

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it's possible for...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2020-11022)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details ** CVEID: CVE-2020-11022 DESCRIPTION: **jQuery is vulnerable to cross-site...

Security Bulletin: Due to the use of IBM Websphere Application Server Liberty, IBM TXSeries for Multiplatforms is vulnerable to a Denial of Service.

Summary There are vulnerabilities in IBM WebSphere Application Server Liberty related packages that are shipped with IBM TXSeries for Multiplatforms. The version of IBM WebSphere Application Server Liberty shipped with IBM TXSeries for Multiplatforms has been updated to address the applicable...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2019-11358)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details ** CVEID: CVE-2019-11358 DESCRIPTION: **jQuery, as used in Drupal core, is...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubescape, minio, aws-ebs-csi-driver, flux-helm-controller, ip-masq-agent, kubernetes-dashboard, prometheus-pushgateway, skopeo, argo-cd, grafana, rqlite, spicedb, temporal-server, ctop, istio-cni, clusterctl, cri-tools, kor, kubernetes-csi-livenessprobe, trillian,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: minio, aws-ebs-csi-driver, flux-helm-controller, ip-masq-agent, kubernetes-dashboard, prometheus-pushgateway, kubebuilder, argo-cd, dataplaneapi, yam, rqlite, tailscale, petname, temporal-server, ctop, clusterctl, cri-tools, kor, aws-flb-firehose,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: telegraf, amass, kube-bench, argo-workflows, ferretdb, kine, kots, caddy, vault, keda, step-ca, trillian, k3s, spicedb, temporal-server,...

GHSA-X32M-MVFJ-52XV vulnerabilities

Vulnerabilities for packages:...

CVE-2023-38470 vulnerabilities

Vulnerabilities for packages:...

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: python,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes, aws-ebs-csi-driver, ip-masq-agent, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, spark-operator, calico, local-static-provisioner, node-feature-discovery, cluster-autoscaler,...

CVE-2022-3736 vulnerabilities

Vulnerabilities for packages:...

GHSA-V5QP-MX94-J49V vulnerabilities

Vulnerabilities for packages:...

GHSA-7P63-JGG6-RGPV vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: wolfictl,...

GHSA-C5PJ-MQFH-RVC3 vulnerabilities

Vulnerabilities for packages: wolfictl,...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, neo4j,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubescape, chartmuseum, k9s, flux-helm-controller, eksctl, k8sgpt, kots, up, zot, cert-manager, trivy, helm-operator, cilium-cli, zarf, helm-push, flux-source-controller,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubescape, chartmuseum, k9s, flux-helm-controller, eksctl, k8sgpt, kots, up, zot, cert-manager, trivy, helm-operator, cilium-cli, zarf, helm-push, flux-source-controller,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3914 vulnerabilities

Vulnerabilities for packages:...

GHSA-FFF2-PWCG-X73M vulnerabilities

Vulnerabilities for packages:...

GHSA-JFH3-F27X-P9GP vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4058 vulnerabilities

Vulnerabilities for packages:...

GHSA-9XRG-J488-68QQ vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5159 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5493 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-46407 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4323 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-32660 vulnerabilities

Vulnerabilities for packages:...

GHSA-HJ8R-56HG-7WG8 vulnerabilities

Vulnerabilities for packages:...

GHSA-798R-FXXX-HVXJ vulnerabilities

Vulnerabilities for packages:...

GHSA-V34C-9RWG-QPF6 vulnerabilities

Vulnerabilities for packages:...

CVE-2020-26160 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-25139 vulnerabilities

Vulnerabilities for packages:...