RHSA-2020:3032 Red Hat Security Advisory: mod_auth_openidc:2.3 security and bug fix update

Bulletin has no description...

CVE-2024-43232

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP OnlineSupport, Essential Plugin Timeline and History slider allows PHP Local File Inclusion.This issue affects Timeline and History slider: from n/a through 2.3...

WordPress plugin Timeline and History slider 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress plugin Void Elementor Post Grid Addon for Elementor Page builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

Dovecot 2.2.x < 2.3.21.1 Multiple Vulnerabilities

Dovecot is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dovecot:dovecot"; ifdescription...

CVE-2024-39688 fishaudio/Bert-VITS2 Limited File Write in webui_preprocess.py generate_config function

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is concatenated with other folders and used to open a new file in the generateconfig function, which leads to a limited file write. The issue allows for writing /config/config.json file in arbitra...

BIT-HYPERLEDGER-FABRIC-ORDERER-2022-45196

Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...

OPENSUSE-SU-2024:14135-1 python310-bugzilla-3.2.0-2.3 on GA media

These are all security issues fixed in the python310-bugzilla-3.2.0-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10784-1 giflib-devel-32bit-5.2.1-2.3 on GA media

These are all security issues fixed in the giflib-devel-32bit-5.2.1-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10363-1 avahi-0.6.32-2.3 on GA media

These are all security issues fixed in the avahi-0.6.32-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13523-1 python-paramiko-doc-3.3.1-2.3 on GA media

These are all security issues fixed in the python-paramiko-doc-3.3.1-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10859-1 icu-69.1-2.3 on GA media

These are all security issues fixed in the icu-69.1-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11013-1 libwpd-0_10-10-0.10.3-2.3 on GA media

These are all security issues fixed in the libwpd-010-10-0.10.3-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11205-1 python36-Django-3.2.7-2.3 on GA media

These are all security issues fixed in the python36-Django-3.2.7-2.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10823-1 groovy-2.4.21-2.3 on GA media

These are all security issues fixed in the groovy-2.4.21-2.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

PT-2024-22601 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3 through 2.3.0p5 Description: The issue is related to improper restriction of excessive authentication attempts with two factor authentication methods, which facilitates brute-forcing of second factor mechanisms...

WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WP Visitors Tracker versions = 2.3...

CVE-2024-36897

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx-dcbios-integratedinfo while it was NULL. DAL parse...