12036 matches found
CVE-2022-45843 WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...
CVE-2022-45843 WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...
The vulnerability of the HTTP-protocol implementation (http.sys) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the HTTP-protocol implementation http.sys in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP/3 request from a remote location...
PT-2023-21724 · Unknown · Smartcars 3
Name of the Vulnerable Software and Affected Versions: smartCARS 3 versions 0.5.8 and prior Description: The issue affects smartCARS 3, a flight tracking software. In the affected versions, failed login attempts result in passwords being stored in error logs. This does not occur in version 0.5.9...
A Bootiful Podcast: Mark Thomas, Apache Tomcat contributor extraordinaire
Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long talks to longtime Apache Tomcat contributor extraordinaire Mark Thomas I wrote a free white paper on using Spring Boot 3 AOT and GraalVM. Learn the secrets to working with Spring Boot 3 and Graal...
AZL-37680 CVE-2023-0464 affecting package hvloader for versions less than 1.0.1-3
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...
This Week in Spring - March 21st, 2023
Hi, Spring fans! Welcome to another rip roaring installment of This Week in Spring! It's March 21st and today they announced Java 20! It's an exciting time to be a Java developer. Java 20, of course, is just another amazing installment before Java 21, which comes out in six short months, includin...
Ubuntu 20.04 LTS : Ruby vulnerability (USN-5806-3)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5806-3 advisory. USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Tenable has extracted the preceding description block directly from...
Ubuntu: Security Advisory (USN-5806-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Spring Tips: Vaadin Flow and Spring Boot 3
Hi, Spring fans! In this installment, we'll look at the fantastic Vaadin Flow library, which has recently been updated for Spring Boot 3, and how it can help you be happier. the code is available, as usual, here this episode features special guest Marcus Hellberg, VP developer relations from...
Quantum DXi Storage With Firmware 3.x Does Not Work with Veeam Backup & Replication 12
Challenge When attempting to add Quantum DXi storage with firmware 3.x to Veeam Backup & Replication, the following error is shown: Failed to StartAgent: Failed to construct ClientAgentProtocol. If the Quantum DXi storage was added to Veeam Backup & Replication prior to upgrading to Veeam Backup ...
A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine on the latest and greatest in 2023
Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long @starbuxman talks to Spring Batch lead Mahmoud Ben Hassine @FMBENHASSINE about the latest and greatest in Spring Batch. notes Submit your talk to SpringOne@Explore, being held August 21-24, 2023,...
Patch Tuesday - March 2023
Microsoft is offering fixes for 101 security issues for March 2023 Patch Tuesday, including two zero-day vulnerabilities; the most interesting of the two zero-day vulnerabilities is a flaw in Outlook which allows an attacker to authenticate against arbitrary remote resources as another user...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
WordPress Smart Slider 3 Plugin < 3.5.1.11 Object Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextendweb:smartslider3"; if description...
GHSA-C5VJ-F36Q-P9VG Password Shucking Vulnerability
Impact An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability. Therefore, they should be removed as soon as possible. If an attacker gets 1 the user's hashed...
Intel® Distribution for Python 2018 for Windows* Advisory
Summary: A potential security vulnerability in Intel® Distribution for Python IDP 2018 may allow an unprivileged user to escalate privileges via a local vector. Intel is releasing IDP updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12175 Description: Defau...
CVE-2023-0804 affecting package libtiff 4.5.0-3
CVE-2023-0804 affecting package libtiff 4.5.0-3. This CVE either no longer is or was never applicable...