176 matches found
WordPress plugin WP Armour Extended 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WP Armour Extended versions = 1.26...
PT-2024-28028 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS versions prior to 1.26.0 Dell BIOS versions prior to 1.35.0 Dell BIOS versions prior to 2.32.0 Description: The issue is related to an Improper Input Validation vulnerability in an externally developed component of Dell BIOS. A high...
Important: apache-commons-compress
Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: temporal-server, step, step-ca, kots, ferretdb, trillian-fips, trillian, amass, argo-workflows, src, falcosidekick-fips, kine, caddy, kube-bench-fips, kube-bench, wavefront-collector-for-kubernetes, temporal-server-fips, k3s, caddy-fips, argo-workflows-fips, spicedb...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: temporal-server, step, step-ca, kots, ferretdb, trillian-fips, trillian, amass, argo-workflows, src, falcosidekick-fips, kine, caddy, kube-bench-fips, kube-bench, wavefront-collector-for-kubernetes, temporal-server-fips, k3s, caddy-fips, argo-workflows-fips, spicedb...
CVE-2024-1586
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom schema in all versions up to, and including, 1.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject...
GHSA-4265-CCF5-PHJ5 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...
DEBIAN-CVE-2024-26308
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...
CVE-2024-26308 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...
CVE-2024-26308 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...
CVE-2024-26308
CVE-2024-26308 affects Apache Commons Compress: Allocation of Resources Without Limits or Throttling. The IBM bulletin lists the vulnerability as present in Apache Commons Compress 1.21 through 1.25.x and fixes it in 1.26. Impact is resource exhaustion/denial of service with a base score of 5.5 (...
Apache Commons Compress Security Vulnerability
Apache Commons Compress is an American Apache Apache Foundation library for processing compressed files. A security vulnerability exists in Apache Commons Compress versions 1.21 through prior to 1.26, which stems from unrestricted resource allocation...
PT-2024-2688
Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.21 through 1.25 Description The issue is related to an uncontrolled resource consumption vulnerability in Apache Commons Compress, which can be exploited by an attacker to impact the availability of protected...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: kubevela, docker-machine-driver-harvester, k9s, kots, pulumi, crane, cri-tools, nerdctl, kubeflow-katib, gitsign, aactl, kargo, helm-operator-fips, newrelic-infrastructure-agent, slsa-verifier, k3d, up, cadvisor, cosign-fips, zot, argo-workflows,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: kubevela, docker-machine-driver-harvester, k9s, kots, pulumi, crane, cri-tools, nerdctl, kubeflow-katib, gitsign, aactl, kargo, helm-operator-fips, newrelic-infrastructure-agent, slsa-verifier, k3d, up, cadvisor, cosign-fips, zot, argo-workflows,...
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: kaniko, k9s, kots, runc, grype, nerdctl, newrelic-infrastructure-agent, podman, k3d, cadvisor, zot, kubernetes, skaffold, ctop, trivy, kubescape, syft, wolfictl, zarf, docker, k3s, skopeo, buildkitd...
GHSA-MR45-RX8Q-WCM9 vulnerabilities
Vulnerabilities for packages: minio, k3s, nats-server, nats...
