RHSA-2019:0886 Red Hat Security Advisory: AMQ Clients 2.3.1 release and security update

Bulletin has no description...

CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1. A patched version of the package is available...

OPENSUSE-SU-2024:14332-1 keepalived-2.3.1+git59.b6681f98-1.1 on GA media

These are all security issues fixed in the keepalived-2.3.1+git59.b6681f98-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-38642

CVE-2024-38642 affects QNAP QuMagie. The issue is an improper certificate validation vulnerability in QuMagie that could allow local network users to compromise system security via unspecified vectors. The CVE entry lists a high impact (CVSS v3.1: HIGH) with local attack vector, low complexity, a...

PT-2024-28096 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.3.1 Description: An improper certificate validation issue affects QuMagie, potentially allowing local network users to compromise system security via unspecified vectors. Recommendations: For versions prior to 2.3....

CVE-2024-41950

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

CVE-2024-41950

CVE-2024-41950 affects Haystack, an open‑source end‑to‑end LLM framework. The vulnerability arises from components that render Jinja2 templates on the client side, enabling remote code execution if a user creates and renders a malicious template within a Pipeline. Multiple connected sources (incl...

CVE-2024-41950 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

CVE-2024-41950 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case a different issue than CVE-2020-6851.

...

CVE-2024-41184

A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

AZL-43495 CVE-2023-39329 affecting package openjpeg2 2.3.1-12

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opjt1decodecblks function in tcd.c through a crafted image file, causing a denial of service...

Ping Identity PingFederate PingOne MFA Integration Kit Security Vulnerability

Ping Identity PingFederate PingOne MFA Integration Kit is from Ping Identity This integration kit allows PingFederate to use the PingOne MFA service for multi-factor authentication MFA. A security vulnerability exists in Ping Identity PingFederate PingOne MFA Integration Kit versions prior to...

CVE-2020-27841 affecting package openjpeg2 for versions less than 2.3.1-12

CVE-2020-27841 affecting package openjpeg2 for versions less than 2.3.1-12. A patched version of the package is available...

CVE-2024-35669

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...

WordPress plugin Debug Log Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress TablePress Plugin <= 2.3.1 is vulnerable to Server Side Request Forgery (SSRF)

Software TablePress Type Plugin Vulnerable versions = 2.3.1 Fixed in 2.3.2 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-4354 Patch priority Low CVSS severity Low 6.4 Developer TablePress PSID e683cfb42286 Credits Tobias Weißhaar kun19 Required privilege...

CVE-2024-35652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.1...

WordPress Debug Log Manager Plugin <= 2.3.1 is vulnerable to Broken Access Control

Software Debug Log Manager Type Plugin Vulnerable versions = 2.3.1 Fixed in 2.3.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35669 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dd8601aecb9c Credits Majed Refaea Required...

WordPress ShareThis Share Buttons Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

Software ShareThis Share Buttons Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3648 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8b942c804f7 Credits Krzysztof Zając...