SUSE-SU-2024:2616-1 Security update for python-Django

This update for python-Django fixes the following issues: - Fixed regression in previous CVE fixes that made the package not work with Python 3.6...

PT-2024-41001 · Django · Django

Name of the Vulnerable Software and Affected Versions: Django affected versions not specified Description: The issue is related to a regression in previous fixes that caused compatibility problems with Python 3.6. Recommendations: At the moment, there is no information about a newer version that...

Exploit for Path Traversal in Bazarr

CVE-2024-40348 POC for CVE-2024-40348 Bazaar v1.4.3 and prior...

Huawei EulerOS: Security Advisory for python-idna (EulerOS-SA-2024-1894)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress BSK PDF Manager Plugin <= 3.6 is vulnerable to Cross Site Scripting (XSS)

Software BSK PDF Manager Type Plugin Vulnerable versions = 3.6 Fixed in 3.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38767 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d2d0e030fa4 Credits LVT-tholv2k Required privilege Contribut...

[SECURITY] Fedora 40 Update: python3.6-3.6.15-31.fc40

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 39 Update: python3.6-3.6.15-29.fc39

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

PT-2024-28153 · Unknown · Gd Rating System

Name of the Vulnerable Software and Affected Versions: GD Rating System versions 3.6 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. Recommendations: For GD Rati...

WordPress plugin GD Rating System path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

DEBIAN-CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

AZL-59690 CVE-2024-3651 affecting package python3 for versions less than 3.9.19-13

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

AZL-43210 CVE-2024-3651 affecting package python-pip for versions less than 24.0-2

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

PYSEC-2024-60

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

PT-2024-11728 · Northern.Tech · Mender

Name of the Vulnerable Software and Affected Versions: Northern.tech Mender versions 3.3.x through 3.3.1 Northern.tech Mender versions 3.4.x through 3.4.0 Northern.tech Mender versions 3.5.x through 3.5.0 Northern.tech Mender versions 3.6.x through 3.6.0 Description: The issue is related to...

Exploit for OS Command Injection in Zyxel Nas326_Firmware

CVE-2024-29973 PoC and Bulk Scanner Overview This is a pr...

OPENSUSE-SU-2024:11191-1 ppp-2.4.8-3.6 on GA media

These are all security issues fixed in the ppp-2.4.8-3.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10886-1 kafka-source-2.1.0-3.6 on GA media

These are all security issues fixed in the kafka-source-2.1.0-3.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11402-1 squashfs-4.4-3.6 on GA media

These are all security issues fixed in the squashfs-4.4-3.6 package on the GA media of openSUSE Tumbleweed...

Exploit for Path Traversal in Solarwinds Serv-U

CVE-2024-28995 PoC and Bulk Scanner Overview This reposit...