25 matches found
RHCOS 3 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2019:3143)
The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3143 advisory. - atomic-openshift: OpenShift builds don't verify SSH Host Keys for the git repository CVE-2019-10150 Note that Nessus has not tested for thi...
CVE-2025-10150
creationtimestamp| type| source ---|---|--- 2025-10-28 11:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4assqnlel2x...
CVE-2024-10150
The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
CVE-2024-10150
creationtimestamp| type| source ---|---|--- 2024-10-25 11:13:46+00:00| seen| https://t.me/cvedetector/8909...
CVE-2024-10150 Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
CVE-2024-10150 Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
WordPress Bamazoo Button Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Bamazoo Button Generator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10150 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 296ef2edb58f Credits Francesco Carlucci...
K54606234: Linux kernel vulnerability CVE-2016-10150
Security Advisory Description Use-after-free vulnerability in the kvmioctlcreatedevice function in virt/kvm/kvmmain.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service host OS crash or possibly gain privileges via crafted ioctl calls on the /dev/kvm device...
CVE-2019-10150
It was found that OpenShift Container Platform does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output. Mitigation Use only methods such as HTTPS with TLS...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2019:3143)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3143 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.1.20 openshift-enterprise-builder-container security update
An update for openshift-enterprise-builder-container is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.10 atomic-openshift kube-apiserver security update
An update for atomic-openshift kube-apiserver is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2019-10150
OpenShift Container Platform versions 3.6.x–4.6.0 fail to verify SSH host keys when using SSH key authentication during builds, allowing a network-adversary who can redirect traffic to alter build outputs (CVE-2019-10150). Affected product: OpenShift Container Platform. Root cause: builds do not ...
CVE-2018-10150
CVE-2018-10150 is rejected and not used as an active vulnerability entry.
CVE-2017-10150
Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite subcomponent: Platform. Supported versions that are affected are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2017-10150
CVE-2017-10150 affects the Primavera Unifier Platform subcomponent of Oracle Primavera Products Suite. Affected versions are 9.13, 9.14, 10.1, 10.2, 15.1, 15.2, 16.1 and 16.2. The vulnerability enables a low-privilege attacker with network access via HTTP to compromise Primavera Unifier, potentia...
Oracle Primavera Unifier Multiple Vulnerabilities (July 2017 CPU)
According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.x prior to 16.2.8.1. It is, therefore, affected by the following vulnerabilities : - A unspecified flaw exists in the Platform component that allows an authenticated,...
USN-3190-2: Linux kernel (Raspberry Pi 2) vulnerabilities
Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...