PT-2024-24635 · Binary Carpenter · The Thank You Page Customizer For Woocommerce

Name of the Vulnerable Software and Affected Versions: Custom Thank You Page Customize For WooCommerce by Binary Carpenter versions 1.4.12 and earlier Description: The issue is related to a Missing Authorization vulnerability in Custom Thank You Page Customize For WooCommerce by Binary Carpenter...

[SECURITY] [DSA 5655-2] cockpit regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5655-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 16, 2024 https://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update

OpenShift API for Data Protection OADP 1.3.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

Mitel Mivoice Business Detection

Binary data mitelmivoicebusinessdetect.nbin...

Jmcnamara Spreadsheet-ParseExcel Installed (Windows)

Binary data jmcnamaraspreadsheetparseexcelwininstalled.nbin...

WordPress Custom Thank You Page Customize For WooCommerce by Binary Carpenter plugin <= 1.4.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Custom Thank You Page Customize For WooCommerce by Binary Carpenter versions = 1.4.12...

Microsoft Azure Appliance Configuration Manager Installed (Windows)

Binary data microsoftazureapplianceconfigurationmanagerwininstalled.nbin...

Microsoft Azure Discovery Service Installed (Windows)

Binary data microsoftazurediscoveryservicewininstalled.nbin...

Microsoft Azure Web App Discovery And Assessment Service Installed (Windows)

Binary data microsoftazurewebappdiscoveryandassessmentservicewininstalled.nbin...

WordPress Custom Thank You Page Customize For WooCommerce by Binary Carpenter Plugin <= 1.4.12 is vulnerable to Broken Access Control

Software Custom Thank You Page Customize For WooCommerce by Binary Carpenter Type Plugin Vulnerable versions = 1.4.12 Fixed in 1.4.14 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32517 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership...

Microsoft Azure Appliance Auto Update Installed (Windows)

Binary data microsoftazureapplianceautoupdatewininstalled.nbin...

Microsoft Azure SQL Discovery And Assessment Service Installed (Windows)

Binary data microsoftazuresqldiscoveryandassessmentservicewininstalled.nbin...

Microsoft Azure Assessment Service Installed (Windows)

Binary data microsoftazureassessmentservicewininstalled.nbin...

Microsoft Azure Migrate Installed (Windows)

Binary data microsoftazuremigratewininstalled.nbin...

OESA-2024-1408 cri-o security update

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface. Security Fixes: A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the...

Open Information Security Foundation Suricata Installed (Linux)

Binary data oisfsuricatanixinstalled.nbin...

CVE-2024-21509

A prototype pollution vulnerability was found in mysql2. Insecure results in object creation and improper user input sanitization can lead to prototype poisoning. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Securit...

Excessive Memory Allocation (Throttling)

xpdf is vulnerable to Excessive Memory AllocationThrottling. The vulnerability is due to insufficient input validation, which allows crafted input to trigger excessive memory allocation. For example, sending a crafted PDF document to the pdftoppm binary can exploit this vulnerability, particularl...