PT-2024-38348 · Simple Machines · Simplemachines Smf

Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A vulnerability has been found in the User Alert Read Status Handler component, specifically in the file /index.php?action=profile;u=2;area=showalerts;do=read. The manipulation of the aid argument...

PT-2024-33707

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been identified where the description show function accesses invalid memory if the return type of the STR method is not a buffer object. Only buffer...

PT-2024-29339 · Mmudb · Mmudb

Name of the Vulnerable Software and Affected Versions: mmudb version 1.9.3 Description: The issue concerns the use of the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, which could allow attackers to intercept communications via a man-in-the-middle attack. Recommendations: F...

PT-2024-37725

Name of the Vulnerable Software and Affected Versions Campaign Monitor for WordPress plugin for WordPress versions up to, and including, 2.8.15 Description The issue is due to the plugin not properly restricting direct access to "/forms/views/admin/create.php" and display errors being enabled. Th...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-41826

JetBrains TeamCity is affected by a stored XSS vulnerability on the Show Connection page for versions prior to 2024.07. Root cause: lack of proper input handling/sanitization on the Show Connection UI element, enabling stored XSS when user interaction occurs. Impact is limited to cross-site scrip...

PT-2024-5468 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to the lack of protection of the web page structure in the Show Connection element of the JetBrains TeamCity continuous integration and delivery CI/CD system. This...

CVE-2024-41826: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...

CVE-2024-6916

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag...

CVE-2024-6916 Zowe CLI --show-inputs-only displays securely stored properties

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag...

PT-2024-37955 · Zowe Cli · Zowe Cli

Name of the Vulnerable Software and Affected Versions: Zowe CLI affected versions not specified Description: A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag. Recommendations: At th...

CVE-2024-6916: Insecure Storage of Sensitive Information

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag...

SUSE CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

DEBIAN-CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

WordPress Simply Show Hooks plugin <= 1.2.1 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Simply Show Hooks versions = 1.2.1...

WordPress Simply Show Hooks Plugin <= 1.2.1 is vulnerable to Backdoor

Software Simply Show Hooks Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9717f5492dd4 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 20...

PT-2024-30684

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs in the lpfc xcvr data show function, where a memory allocation with kmalloc might fail, making rd...