4280 matches found
Yokogawa CENTUM
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Yokogawa Equipment : CENTUM Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary...
OPENSUSE-SU-2024:10249-1 libgit2-24-0.24.3-1.1 on GA media
These are all security issues fixed in the libgit2-24-0.24.3-1.1 package on the GA media of openSUSE Tumbleweed...
Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks 1. Go to to Quizzes & Surveys 2. Add/edit a...
Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC 1. Go to to Quizzes & Surveys 2. Add/edit...
AZL-62420 CVE-2024-5171 affecting package libao 1.2.0-24
Integer overflow in libaom internal function imgallochelper can lead to heap buffer overflow. This function can be reached via 3 callers: Calling aomimgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and so...
CVE-2024-29828
creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...
CVE-2024-29829
creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...
CVE-2023-38042
creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...
CVE-2024-29825
creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1300 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...
WordPress Email Log Plugin <= 2.4.8 is vulnerable to Other Vulnerability Type
Software Email Log Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A3: Injection Classification Other Vulnerability Type CVE CVE-2024-0867 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7750b3ba7ece Credits Sean Murphy Required privilege...
python27:2.7 security update
babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...
WordPress Similarity Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)
Software Similarity Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3972 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3941fac517e1 Credits Bob Matyas Required privilege...
Fortinet Fortigate Node.js crash over administrative interface (FG-IR-24-017)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-017 advisory. - An improper check or handling of exceptional conditions vulnerability CWE-703 in Fortinet FortiOS version 7.4.1 allows an...
Migration Backup Restore < 3.5.0 - Admin+ SSRF
Description The plugin does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations. 1. Click on "Upload Backup" and add http://127.0.0.1:XXX/123.wpstg - "Upload". If the port is open it will return an error "Not Found...
Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Stack-based Buffer Overflow (CVE-2023-5401)
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...
Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. 'Red Hat Product Security has rated this update a...
CVE-2018-19933
creationtimestamp| type| source ---|---|--- 2024-04-24 22:08:17+00:00| seen| https://t.me/arpsyndicate/4830...
CVE-2023-4973
creationtimestamp| type| source ---|---|--- 2024-04-24 21:09:33+00:00| seen| Telegram/fQCkwzbJbLvewLQiHGCsWuoLqUk9GJHitjci5ogOBDUTag...