Debian dla-3760 : node-xml2js - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3760 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3760-1 [email protected] https://www.debian.org/lts/security/...

CVE-2012-0842

creationtimestamp| type| source ---|---|--- 2024-02-23 17:16:34+00:00| seen| https://t.me/ctinow/191938...

WordPress Backuply – Backup, Restore, Migrate and Clone Plugin <= 1.2.5 is vulnerable to Denial of Service Attack

Software Backuply – Backup, Restore, Migrate and Clone Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.2.6 OWASP Top 10 A4: Insecure Design Classification Denial of Service Attack CVE CVE-2024-0842 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 4e1e9a9b266e Credits...

CVE-2024-0842

creationtimestamp| type| source ---|---|--- 2024-02-09 06:21:27+00:00| seen| https://t.me/ctinow/181817 2024-03-02 13:41:36+00:00| seen| https://t.me/ctinow/198357...

CVE-2024-0842

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restoreins.php file and. This makes it possible for unauthenticated attackers to make excessive...

CVE-2024-0842

CVE-2024-0842 affects the WordPress plugin “Backuply – Backup, Restore, Migrate and Clone.” The issue is a Denial of Service caused by direct access to the backuply/restore_ins.php file, enabling unauthenticated attackers to generate excessive requests and exhaust server resources. Affected versi...

CentOS 8 : tar (CESA-2023:0842)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:0842 advisory. - GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of...

Security Bulletin: Xml2js is vulnerable to CVE-2023-0842 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Xml2js which is vulnerable to CVE-2023-0842. Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution. By sending a...

Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary Multiple security vulnerabilities impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary code on the system, caused by a...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to xml2js abitrary code execution vulnerability(CVE-2023-0842)

Summary Potential abitrary code execution vulnerability in xml2jsCVE-2023-0842 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to the module xml2js (CVE-2023-0842)

Summary IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to the module xml2js CVE-2023-0842. The latest Fix Pack includes xml2js version 5.0 Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary...

Security Bulletin: IBM Decision Optimization in IBM Cloud Pak for Data is vulnerable to a xml2js vulnerability (CVE-2023-0842)

Summary Xmljs is used in IBM Decision Optimization in IBM Cloud Pak for Data. IBM Decision Optimization in IBM Cloud Pak for Data has addressed the reported vulnerability. Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary code on the...

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to [CVE-2023-0842]

Summary Node.js module xml2js is used by IBM App Connect Enterprise Certified Container for processing xml data. IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in...

CVE-2023-0842

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:46+00:00| seen| https://t.me/cibsecurity/61517 2025-02-14 10:09:23+00:00| seen| Telegram/Sk-rz3HL0e0iLsp88vxWneGXLnADbwUq9-Ptbqm3yy-MkT5v...

0.extends.wechat (>=1.0.51, <=1.0.65), 00ld8nuivn (2.1.0) +30718 more potentially affected by CVE-2023-0842 via xml2js (>=0.1.5, <=0.4.23)

xml2js NPM version =0.1.5, =1.0.51, =1.0.65 - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 098of6vzvl 1.1.0 -...

CVE-2023-0842

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited...

CVE-2023-0842

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited...

CVE-2023-0842

CVE-2023-0842 affects xml2js: version 0.4.23 allows prototype pollution by editing proto via unchecked JSON keys. Affected component: xml2js (Node.js). Impact (as stated): attacker could edit/add object properties through prototype pollution. Remediation: upgrade to newer xml2js releases; referen...

CVE-2023-0842 xml2js 0.4.23 - Prototype Pollution

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited...

CVE-2023-0842 xml2js 0.4.23 - Prototype Pollution

xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited...