CVE-2024-28836

An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implementation of the protocol if it is disabled. If the TLS 1.2 implementation was disabled at build time, a TLS 1.2 client could put a TLS 1.3-only server...

CVE-2024-28836

An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implementation of the protocol if it is disabled. If the TLS 1.2 implementation was disabled at build time, a TLS 1.2 client could put a TLS 1.3-only server...

CVE-2024-28836

CVE-2024-28836 affects Mbed TLS 3.5.x before 3.6.0. During server-side TLS version negotiation, the implementation can fall back to TLS 1.2 if TLS 1.2 is disabled. If TLS 1.2 was disabled at build time, a TLS 1.2 client could cause a denial of service by looping on a TLS 1.2 ClientHello for a TLS...

CVE-2024-29025 vulnerabilities

Vulnerabilities for packages: celeborn, seata, tez, selenium, cloudwatch-exporter, sonarqube-10, keycloak, management-api-for-apache-cassandra-4.0, opensearch, spark, elasticsearch, wavefront-proxy, druid...

CVE-2024-29025 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, opensearch, wavefront-proxy, keycloak, selenium, tez, druid, sonarqube-10...

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

CVE-2024-25294

REBUILD v3.5 contains an SSRF vulnerability in FileDownloader.java, proxyDownload, and URL parameters that allows remote attackers to obtain sensitive information and execute arbitrary code. CVSS 3.1 base score 9.1 (CRITICAL) with network access, no user interaction. Public sources across Red Hat...

WordPress WP Coder Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Coder Type Plugin Vulnerable versions = 3.5 Fixed in 3.5.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-2578 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fff15d41931f Credits LeNgocHoa Required privilege Editor Published 18...

GHSA-R978-9M6M-6GM6 vulnerabilities

Vulnerabilities for packages: trino, confluent-common-docker, confluent-kafka, solr, tez...

CVE-2024-23944 vulnerabilities

Vulnerabilities for packages: confluent-kafka, tez, confluent-common-docker, trino, spark, solr...

CVE-2024-23944 vulnerabilities

Vulnerabilities for packages: trino, confluent-common-docker, confluent-kafka, solr, tez...

Jailbreaking LLMs with ASCII Art

Researchers have demonstrated that putting words in ASCII art can cause LLMs--GPT-3.5, GPT-4, Gemini, Claude, and Llama2--to ignore their safety instructions. Research paper...

BIT-MOODLE-2021-32476

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

PT-2024-20741 · Unknown · Gd Rating System

Name of the Vulnerable Software and Affected Versions: GD Rating System versions 3.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website...

zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from the removerxfilter function being out of scope...

February 13, 2024-KB5034685 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

February 13, 2024-KB5034683 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

Microsoft .NET Framework Multiple Vulnerabilities (KB5034276)

This host is missing an important security update according to Microsoft KB5034276 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-50370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh WPBakery Page Builder Addons by Livemesh allows Stored XSS.This issue affects WPBakery Page Builder Addons by Livemesh: from n/a through 3.5...