org.apache.tomcat:tomcat-catalina-ha (8.5.39), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.39) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.39)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.39 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ant (7.0.2), org.apache.tomcat:tomcat-catalina-ha (7.0.2) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.2)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.2 - org.apache.tomcat:tomcat-catalina-ha 7.0.2 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7.4), org.apache.tomcat:tomcat-catalina-ha (8.0.22) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.22)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.4 - org.apache.tomcat:tomcat-catalina-ha 8.0.22 ...

org.apache.tomcat:tomcat-catalina-ha (8.0.9), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.9) +1 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.9)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.9 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

org.apache.tomcat:tomcat-catalina-ant (7.0.103), org.apache.tomcat:tomcat-catalina-ha (7.0.103) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.103)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.103 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.103 - org.apache.tomcat:tomcat-catalina-ha 7.0.10...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.0, <=1.8.1), org.apache.tomcat:tomcat-catalina-ha (8.0.0-rc10) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.0-rc10)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.0-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.0, =1.8.1 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.93), org.apache.tomcat:tomcat-catalina-ws (8.5.93) +1 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.93)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.93 - org.apache.tomcat:tomcat-catalina-ws 8.5.93 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.43), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.43) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.43)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.43 - org.apache.tomcat:tomcat-catalina-jmx-remote...

org.apache.tomcat:tomcat-catalina-ha (8.0.27), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.27) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.27)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.27 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.5)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...

nodejs-ws: denial of service when handling a request with many HTTP headers

A flaw was found in the Node.js WebSocket library ws. A request with several headers exceeding the 'server.maxHeadersCount' threshold could be used to crash a ws server, leading to a denial of service...

Moderate: Red Hat Bug Fix Advisory: .NET 6.0 bug fix and enhancement update

An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services...

nodejs-ws: denial of service when handling a request with many HTTP headers

A flaw was found in the Node.js WebSocket library ws. A request with several headers exceeding the 'server.maxHeadersCount' threshold could be used to crash a ws server, leading to a denial of service...

CVE-2024-9999 Multi-Factor Authentication Bypass in Progress WS_FTP Server

In WSFTP Server versions before 8.8.9 2022.0.9, an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only...

CVE-2024-10647

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. This makes it possible for unauthenticated...

CVE-2024-10647

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. This makes it possible for unauthenticated...

CVE-2024-10647 WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. This makes it possible for unauthenticated...

CVE-2024-10647 WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL

The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. This makes it possible for unauthenticated...

PT-2024-16429 · WordPress · Ws Form Lite

Name of the Vulnerable Software and Affected Versions: WS Form LITE – Drag & Drop Contact Form Builder for WordPress versions up to, and including, 1.9.244 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the UR...

WordPress plugin WS Form LITE 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...