2521 matches found
OPENSUSE-SU-2024:12576-1 libsystemd0-252.3-2.1 on GA media
These are all security issues fixed in the libsystemd0-252.3-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12968-1 opensc-0.23.0-2.1 on GA media
These are all security issues fixed in the opensc-0.23.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11552-1 libmbedcrypto7-2.27.0-2.1 on GA media
These are all security issues fixed in the libmbedcrypto7-2.27.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13876-1 qemu-8.2.2-2.1 on GA media
These are all security issues fixed in the qemu-8.2.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14016-1 libhtp-devel-0.5.48-2.1 on GA media
These are all security issues fixed in the libhtp-devel-0.5.48-2.1 package on the GA media of openSUSE Tumbleweed...
Advisory ROSA-SA-2024-2429
Software: libtiff 4.0.9 OS: ROSA Virtualization 2.1 packageevrstring: libtiff-4.0.9-28.rv3 CVE-ID: CVE-2023-2731 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A null pointer dereferencing bug was found in the LZWDecode function of the Libtiff library in the libtiff/tiflzw.c file. This flaw allows a...
WordPress Elements For Elementor Plugin <= 2.1 is vulnerable to Local File Inclusion
Software Elements For Elementor Type Plugin Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-5348 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 9e9484637a31 Credits stealthcopter Required privilege...
PT-2024-24268 · Ibm · Ibm Planning Analytics
Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
Advisory ROSA-SA-2024-2424
Software: libsolv 0.7.11 OS: ROSA Virtualization 2.1 packageevrstring: libsolv-0.7.11 CVE-ID: CVE-2021-44568 BDU-ID: 2023-05482 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the resolvedependencies function of the libsolv library is related to writing beyond buffer boundaries in memory. Exploitati...
Advisory ROSA-SA-2024-2423
Software: libmpeg2 0.5.1 OS: ROSA Virtualization 2.1 packageevrstring: libmpeg2-0.5.1 CVE-ID: CVE-2022-37416 BDU-ID: None CVE-Crit: N/A CVE-DESC.: Ittiam libmpeg2 uses memcpy with overlapping memory blocks in impeg2mcfullxfullxfullx8x8. CVE-STATUS: Not Relevant CVE-REV:...
CVE-2024-5359
CVE-2024-5359 affects PHPGurukul Zoo Management System v2.1, with a SQL injection in /admin/foreigner-search.php via the searchdata parameter. Exploitation appears remote and publicly disclosed. Connected sources corroborate the file and parameter as the entry point; no official patch/version det...
PT-2024-35786 · Unknown · Phpgurukul Zoo Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue has been identified in the PHPGurukul Zoo Management System, affecting the file /admin/foreigner-bwdates-reports-details.php. The manipulation of the fromdate argument...
Social Pixel <= 2.1 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to:...
WordPress Social Pixel Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
Software Social Pixel Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4005 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f865e3476ddd Credits Bob Matyas Required privilege...
WP Backpack <= 2.1 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to...
Advisory ROSA-SA-2024-2417
Software: faad2 2.8.8 OS: ROSA Virtualization 2.1 packageevrstring: faad2-2.8.8-6.0.1.rv3 CVE-ID: CVE-2021-32272 BDU-ID: 2022-01810 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the stszin function of the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related t...
Advisory ROSA-SA-2024-2411
Software: curl 7.61.1 OS: ROSA Virtualization 2.1 packageevrstring: curl-7.61.1-22.rv3.src.rpm CVE-ID: CVE-2021-22897 BDU-ID: 2022-00375 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Transport Layer Security TLS protocol implementation of the libcurl library is due to security flaws in the...
Advisory ROSA-SA-2024-2410
Software: cloud-init 20.3 OS: ROSA Virtualization 2.1 packageevrstring: cloud-init-20.3-10.el84.5.src.rpm CVE-ID: CVE-2021-3429 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: When instructing Cloud-init to set a random password for a new version user account, Cloud-init wrote that password to the publi...
