8224 matches found
Ubuntu: Security Advisory (USN-7008-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
org.glassfish.main.appclient:gf-client (5.1.0-rc2), org.glassfish.main.appclient:gf-client-module (5.1.0-rc2) +15 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (5.1.0-rc2)
org.glassfish.main.web:web-core MAVEN version 5.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 5.1.0-rc2 -...
org.glassfish.main.appclient:gf-client (6.2.2), org.glassfish.main.appclient:gf-client-module (6.2.2) +14 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (6.2.2)
org.glassfish.main.web:web-core MAVEN version 6.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 6.2.2 - org.glassfish.main.appclient:gf-client-module 6.2....
org.glassfish.main.appclient:gf-client (6.2.5), org.glassfish.main.appclient:gf-client-module (6.2.5) +15 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (6.2.5)
org.glassfish.main.web:web-core MAVEN version 6.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.web:web-core and may be impacted: - org.glassfish.main.appclient:gf-client 6.2.5 - org.glassfish.main.appclient:gf-client-module 6.2....
org.glassfish.main.appclient:gf-client (>=7.0.0-m1, <=7.0.9), org.glassfish.main.appclient:gf-client-module (>=7.0.0-m1, <=7.0.9) +16 more potentially affected by CVE-2024-8646 via org.glassfish.main.web:web-core (>=7.0.0-m1, <=7.0.9)
org.glassfish.main.web:web-core MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.0-m10, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.9 and more Source cves: CVE-2024-8646 Source advisory:...
AZL-48984 CVE-2024-23185 affecting package dovecot 2.3.20-1
Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...
CVE-2024-21528
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...
org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (2.5.0.final)
org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...
org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.0-rc-1)
org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...
io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.4.final, <=1.2.6.beta1), io.apiman:apiman-distro-eap7 (>=1.2.4.final, <=1.2.6.beta1) +48 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.9.2.final)
org.keycloak:keycloak-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.4.final, =1.2.4.final, =1.2.4.final,...
org.keycloak:keycloak-account-api (1.0.2.final), org.keycloak:keycloak-account-freemarker (1.0.2.final) +48 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.0.2.final)
org.keycloak:keycloak-core MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.2.final - org.keycloak:keycloak-account-freemarker 1.0.2.final ...
org.keycloak:keycloak-account-api (1.0.1.final), org.keycloak:keycloak-account-freemarker (1.0.1.final) +48 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.0.1.final)
org.keycloak:keycloak-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.1.final - org.keycloak:keycloak-account-freemarker 1.0.1.final ...
org.keycloak:keycloak-account-api (1.0-rc-2), org.keycloak:keycloak-account-freemarker (1.0-rc-2) +48 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.0-rc-2)
org.keycloak:keycloak-core MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-rc-2 - org.keycloak:keycloak-account-freemarker 1.0-rc-2 -...
GHSA-MQM9-C95H-X2P6 AngularJS allows attackers to bypass common image source restrictions
Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...
PT-2024-39037 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: The issue allows an attacker to send a specially designed query through the CATEGORY parameter in the "/jobportal/admin/vacancy/controller.php" API endpoint, and retrieve all the...
WordPress plugin WP Extended 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
AZL-48581 CVE-2024-45310 affecting package kubernetes 1.28.4-25
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers an...
CVE-2024-43964
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...
CVE-2024-43964
CVE-2024-43964 is a stored cross-site scripting vulnerability in the WordPress plugin DSGVO All in one for WP . According to the provided references, the issue arises from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are listed as from n/a th...
CVE-2024-43964 WordPress DSGVO All in one for WP plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in one for WP: from n/a through 4.5...