EUVD-2022-51177

Malicious code in bioql PyPI...

Security update for kubernetes1.28

This update for kubernetes1.28 fixes the following issues: CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Backdrop CMS 安全漏洞

Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.28.x prior to version 1.28.5 and version 1.29.x prior to version 1.29.3, which stems from a failure to adequately isolate long text content when using CKEditor ...

CVE-2024-3208

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in all versions up to, and including, 1.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, goreleaser, docker-compose, logstash-exporter-fips, cortex, pulumi-kubernetes-operator, rclone, minio-fips, tigera-operator, vault-csi-provider, crossplane-provider-aws-firehose, frp, atlantis-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kube-bench-fips, trillian-fips, falcosidekick-fips, spicedb, temporal-server, src, step-ca, amass, wavefront-collector-for-kubernetes, kots, temporal-server-fips, caddy-fips, ferretdb, step, argo-workflows, trillian, argo-workflows-fips, k3s, kube-bench, kine, caddy...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zarf, cadvisor, newrelic-infrastructure-agent, zot, k9s, ctop, kaniko, docker, kots, grype, syft, k3s, buildkitd, wolfictl, podman, runc, kubescape, skopeo, skaffold, kubernetes, k3d, nerdctl, trivy...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: buildkitd, skopeo, ctop, podman, cadvisor, kaniko, kots, skaffold, runc, trivy, zarf, zot, docker, newrelic-infrastructure-agent, wolfictl, syft, kubescape, k9s, nerdctl, k3d, k3s, kubernetes, grype...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: spark-operator, buildkitd, dgraph, metacontroller, helm, skaffold, aactl, pulumi-language-java, kubewatch, flux-helm-controller, kpt, oauth2-proxy, pulumi-language-dotnet, kubescape, kubeflow-katib, src, prometheus-adapter, ollama, slsa-verifier, k3d,...

This Week in Spring - August 29th, 2023 - the post SpringOne recovery blog

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm exhausted. Seriously. Last week was mental. If you need me, I'll be over sipping on a tea... But, before that, there's a ton of things to cover from this last week, as always, and there's no rest for the curious, so let's...

CVE-2022-48481

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

CVE-2022-48481

JetBrains Toolbox App (macOS) prior to version 1.28 is affected by a vulnerability allowing DYLIB injection. Root cause: dylib loading/injection path on macOS leads to potential tampering. Impact: supports potential malicious activity, with confidentiality/integrity/availability concerns noted in...

PT-2023-15814 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 1.28 Description: The issue concerns a DYLIB injection on macOS. This allows for potential malicious activity. The estimated number of potentially affected devices worldwide is not specified. There is n...

Grommunio Gromox 安全漏洞

Grommunio Gromox is a groupware server from Grommunio that replaces Microsoft Exchange. A security vulnerability exists in Grommunio Gromox versions prior to 1.28, which stems from weak permissions in the configuration file in the PAM module, and can be exploited by an attacker to allow the PAM...

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

Cross site request forgery (csrf)

Cross site request forgery CSRF in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router...

GHSA-69FV-GW6G-8CCG Potential memory corruption in arrayfire

The attribute repr added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates = version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlink...

Potential memory corruption in arrayfire

The attribute repr added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates = version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlink...

Advisory ROSA-SA-2021-1873

Software: libidn 1.28 OS: Cobalt 7.9 CVE-ID: CVE-2015-2059 CVE-Crit: MEDIUM CVE-DESC: The stringpreputf8toucs4 function in libin prior to 1.31, used in jabberd2, allows context-sensitive attackers to read system memory and possibly exert other undefined influence via invalid UTF-8 characters in a...

SUSE-SU-2021:1979-1 Security update for snakeyaml

This update for snakeyaml fixes the following issues: - Upgrade to 1.28 - CVE-2017-18640: The Alias feature allows entity expansion during a load operation bsc1159488, bsc1186088...