5870 matches found
WordPress SuevaFree Essential Kit Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
Software SuevaFree Essential Kit Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11432 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a56ca15d2b5b Credits zakaria Required...
CVE-2024-53085
creationtimestamp| type| source ---|---|--- 2024-11-19 20:09:47+00:00| seen| https://t.me/cvedetector/11487...
Security Bulletin: Vulnerability in WebSphere Application Server affect IBM Cloud Pak System[CVE-2023-51775]
Summary Vulnerability found in jose4 used by WebSphere Application Server affect IBM Cloud Pak System Vulnerability Details CVEID:CVE-2023-51775 DESCRIPTION: jose4j is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted p2c value, a remote attack...
Security Bulletin: IBM B2B File Gateway is affected by Apache Struts vulnerability to denial of service
Summary IBM B2B File Gateway is affected by Apache Struts vulnerability to denial of service Vulnerability Details CVEID:CVE-2023-41835 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by an incomplete cleanup of the struts.multipart.saveDir directory after an upload reques...
Security Bulletin: Multiple Vulnerabilities in IBM Event Processing
Summary Multiple base image vulnerabilities were addressed in IBM Event Processing version 1.2.2. Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trustin...
Security Bulletin: vulnerability in Logback affects IBM Workload Scheduler.
Summary IBM Workload Scheduler is affected by a vulnerability in Logback that can cause denial of service CVE-2023-6378 Vulnerability Details CVEID:CVE-2023-6378 DESCRIPTION: QOS.ch Sarl Logback is vulnerable to a denial of service, caused by a serialization flaw in the receiver component. By...
Security Bulletin: vulnerability in Microsoft Azure Storage affects IBM Workload Scheduler.
Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Storage that can cause Authorization Bypass CVE-2022-30187 Vulnerability Details CVEID:CVE-2022-30187 DESCRIPTION: Microsoft Azure Storage Library could allow a local authenticated attacker to bypass security...
CVE-2024-8936
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory...
CVE-2024-8936
The CVE-2024-8936 issue affects Schneider Electric Modicon M340 family devices (including M340, MC80, Momentum Unity M1E) via an improper input validation in the Modbus handling. The root cause is insufficient input validation that enables a MITM scenario, after which a crafted Modbus function ca...
CVE-2024-8936
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory...
Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2023-3817]
Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-3817 Vulnerability Details CVEID:CVE-2023-3817 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw when using the DHcheck,...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to tungstenite-0.20.1.crate CVE-2023-43669
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to tungstenite-0.20.1.crate CVE-2023-43669. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-43669 DESCRIPTION: Snapview Tungstenite crate for Rust is vulnerable t...
CVE-2024-51327
creationtimestamp| type| source ---|---|--- 2024-11-04 20:17:57+00:00| seen| https://t.me/cvedetector/9774 2026-06-22 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3motu4dvxxs2y...
CVE-2021-31233
creationtimestamp| type| source ---|---|--- 2024-11-02 11:00:20+00:00| seen| Telegram/6wTo3ENZ8MPlW0gATzOn95SEJ5cHLtgsT1JtfUJhQd1eKrjb 2025-01-10 17:04:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1180 2026-07-29 12:00:27+00:00| seen| https://t.me/CVEhub/13959...
CVE-2024-48271
creationtimestamp| type| source ---|---|--- 2024-10-30 21:43:20+00:00| seen| https://t.me/cvedetector/9459...
CVE-2024-48648
creationtimestamp| type| source ---|---|--- 2024-10-30 20:03:02+00:00| seen| https://t.me/cvedetector/9451...
Video Downloader 安全漏洞
Video Downloader is a video downloading application. A security vulnerability exists in Video Downloader version 20-30.05.24. An attacker can exploit this vulnerability to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...
Security Bulletin: IBM Master Data Management is vulnerable to denial of service through OpenSSL by a specially crafted request (CVE-2023-2650)
Summary IBM Master Data Management v11.6, and v12.0 are vulnerable to denial of service through OpenSSL by a specially crafted request from no message size limit. OpenSSL is vulnerable to a denial of service, caused by a flaw when using OBJobj2txt directly, or use any of the OpenSSL subsystems...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for September 2024.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.0-IF001 Vulnerability Details CVEID:CVE-2024-43799 DESCRIPTION: pillarjs send is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this...
Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to key-value store "etcd". (CVE-2018-1098, CVE-2018-1099, CVE-2022-34038, CVE-2021-2823).
Summary The distributed key-value store, etcd, used by IBM Storage Protect Server is vulnerable to cross-site scripting, denial of service, or unauthorized access to the host system. This bulletin outlines the steps to address these vulnerabilities. Vulnerability Details CVEID:CVE-2018-1098...