CVE-2024-0139: Undefined Security Weakness

NVIDIA Base Command Manager and Bright Cluster Manager for Linux contain an insecure temporary file vulnerability. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-54206: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in URBAN BASE Z-Downloads z-downloads allows Stored XSS.This issue affects Z-Downloads: from n/a through = 1.11.7...

CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

ABB ASPECT security vulnerabilities

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that originates from a web browser interface that may be able to manipulate application usernames/passwords in plaintext or Base64 encoding...

Slackware: Security Advisory (SSA:2024-339-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-4MW5-2636-4535 op_panic in the base runtime can force a panic in the runtime's containing thread

Affected versions use denocore releases that expose Deno.core.ops.oppanic to the JS runtime in the base core This function when called triggers a manual panic in the thread containing the runtime, breaking sandboxing It can be fixed by stubbing out the exposed op: javascript Deno.core.ops.oppanic...

CVE-2024-10664 Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

CVE-2024-10664 Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

CVE-2024-10664

CVE-2024-10664 – BasePress Docs (Knowledge Base documentation & wiki plugin) for WordPress is affected by a missing authorization check in basepress_db_posts_update(), enabling data modification by authenticated users with Subscriber-level access and above, across all versions up to 2.16.3.3. Pub...

openSUSE Security Advisory (SUSE-SU-2024:4153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +182 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +30 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=10.0.0, <=10.0.4)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +182 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +30 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=10.0.0, <=10.0.4)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: GHSA-9R9M-FFP6-9X4V...

Security Bulletin: Mutiple vulnerabilites in Python affect IBM Robotic Process Automation

Summary Mutiple vulnerabilites in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-11236 DESCRIPTION: Python urllib...

Security Bulletin: A vulnerability in Microsoft .NET Core may affect IBM Robotic Process Automation and result in a remote attacker obtaining sensitive information (CVE-2018-8292).

Summary Microsoft .NET Core is used by IBM Robotic Process Automation as part of the development platform CVE-2018-8292. Vulnerability Details CVEID:CVE-2018-8292 DESCRIPTION: Microsoft .NET Core could allow a remote attacker to obtain sensitive information, caused by an open redirect...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +48 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.4.release)

org.springframework.security:spring-security-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

Debian: Security Advisory (DLA-3976-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +182 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +30 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=10.0.0, <=10.0.4)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: MEND:CVE-2024-52809...