RHSA-2021:5081 Red Hat Security Advisory: mailman:2.1 security update

Bulletin has no description...

RHSA-2021:5080 Red Hat Security Advisory: mailman:2.1 security update

Bulletin has no description...

RHSA-2021:4916 Red Hat Security Advisory: mailman:2.1 security update

Bulletin has no description...

RHSA-2021:4915 Red Hat Security Advisory: mailman:2.1 security update

Bulletin has no description...

RHSA-2021:4837 Red Hat Security Advisory: mailman:2.1 security update

Bulletin has no description...

RHBA-2014:0487 Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 Release Advisory

Bulletin has no description...

RHSA-2021:3145 Red Hat Security Advisory: .NET Core 2.1 security and bugfix update

Bulletin has no description...

RHSA-2021:3144 Red Hat Security Advisory: .NET Core 2.1 on Red Hat Enterprise Linux security and bugfix update

Bulletin has no description...

WordPress plugin Favicon Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

WordPress Viral Signup plugin <= 2.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Viral Signup versions = 2.1...

Fedora 39 : microcode_ctl (2024-dca1b54441)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-dca1b54441 advisory. - Update to upstream 2.1-44. 20240813 - Update of 06-55-07/0xbf CLX-SP/W/X B1/L1 microcode from revision 0x5003605 up to 0x5003707; - Update of...

Spring Cloud Config Server Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Spring Cloud Config Server Directory Traversal', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability whi...

WordPress plugin Viral Signup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

OPENSUSE-SU-2024:14286-1 frr-10.0.1-2.1 on GA media

These are all security issues fixed in the frr-10.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14278-1 libpodofo-devel-0.10.3-2.1 on GA media

These are all security issues fixed in the libpodofo-devel-0.10.3-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-11697 · WordPress · Login/Registration Attempts Limit

Name of the Vulnerable Software and Affected Versions: LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress versions up to, and including, 2.1 Description: The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login...

CVE-2024-35143

CVE-2024-35143 concerns IBM Planning Analytics Local (2.0, 2.1) that connects to a MongoDB server which is exposed to remote access with no password authentication. The root cause is unauthenticated MongoDB connections enabled by the product’s configuration, allowing a remote attacker to gain una...

PT-2024-26336 · Mongodb +1 · Mongodb +1

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue concerns a lack of password authentication in MongoDB connections, allowing a remote attacker to gain unauthorized access to the database. This could potentially lea...

Advisory ROSA-SA-2024-2450

Software: samba 4.12.3 OS: ROSA Virtualization 2.1 packageevrstring: samba-4.12.3 CVE-ID: CVE-2016-2124 BDU-ID: 2021-05993 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability was discovered in the way Samba implemented SMB1 authentication. An attacker could use this vulnerability to extract the public...

WordPress SKT Skill Bar Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software SKT Skill Bar Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38698 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fc7e500ed890 Credits Jean Tirstan T Required privilege Contributo...