CVE-2019-11808

Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs...

CVE-2024-11808

The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpnonce' parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-11808

creationtimestamp| type| source ---|---|--- 2024-12-21 08:27:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113689861780764620 2024-12-21 09:15:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsktzmon52z 2024-12-21 11:09:07+00:00| seen|...

CVE-2024-11808 Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting

The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpnonce' parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-11808

CVE-2024-11808 (Pingmeter Uptime Monitoring, WordPress) is a reflected XSS vulnerability in the Pingmeter Uptime Monitoring plugin for WordPress through the _wpnonce parameter, affecting all versions up to 1.0.3. The authenticated/unauthenticated risk is described as an attacker tricking a user i...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11808)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Ratpack

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Ratpack. Vulnerability Details CVEID: CVE-2019-11808 DESCRIPTION: Ratpack could allow a remote attacker to obtain sensitive information, caused by the use of a weak PRNG to generate session ID in JDK's...

io.ratpack:ratpack-pac4j (0.9.10) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.10)

io.ratpack:ratpack-session MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.10 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.11) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.11)

io.ratpack:ratpack-session MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.11 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.15) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.15)

io.ratpack:ratpack-session MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.15 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.6.0) +2 more potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.6.0)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2019-11808 Source advisory: GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.0) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.0)

io.ratpack:ratpack-groovy MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.0 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.3) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.3)

io.ratpack:ratpack-groovy MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.3 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.8) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.8)

io.ratpack:ratpack-groovy MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.8 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5), gradle.plugin.com.bytekast:serverless-local-apigateway (>=0.4-snapshot, <=0.5) +1 more potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (>=1.0.0-rc-1, <=1.6.0)

io.ratpack:ratpack-groovy MAVEN version =1.0.0-rc-1, =0.4-snapshot, =0.4-snapshot, =1.0.0-rc-1, =1.6.0 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.1) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.1)

io.ratpack:ratpack-groovy MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.1 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.7) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.7)

io.ratpack:ratpack-groovy MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.7 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.19) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.19)

io.ratpack:ratpack-groovy MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.19 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.8) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.8)

io.ratpack:ratpack-session MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.8 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.6) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.6)

io.ratpack:ratpack-session MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.6 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...