CVE-2024-10664 Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

CVE-2024-10664 Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

CVE-2024-10664

CVE-2024-10664 – BasePress Docs (Knowledge Base documentation & wiki plugin) for WordPress is affected by a missing authorization check in basepress_db_posts_update(), enabling data modification by authenticated users with Subscriber-level access and above, across all versions up to 2.16.3.3. Pub...

openSUSE Security Advisory (SUSE-SU-2024:4153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +34 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=10.0.0, <=10.0.4)

@intlify/core-base NPM version =10.0.0, =1.0.56, =1.0.0, =10.0.0-alpha.1, =10.0.0-alpha.3, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +195 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.0-next.5436b378dff7e64898bb7046afa2d5d574255b54, =0.0.0-next.0d1cf82f9dfbe1d3e7ec5644f85f97a43c8c2334, =0.7.0-beta.15, =0.7.0-beta.15, =0.0.6-alpha-2.5, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =2.3.1 and more Sour...

Security Bulletin: Mutiple vulnerabilites in Python affect IBM Robotic Process Automation

Summary Mutiple vulnerabilites in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-11236 DESCRIPTION: Python urllib...

Security Bulletin: A vulnerability in Microsoft .NET Core may affect IBM Robotic Process Automation and result in a remote attacker obtaining sensitive information (CVE-2018-8292).

Summary Microsoft .NET Core is used by IBM Robotic Process Automation as part of the development platform CVE-2018-8292. Vulnerability Details CVEID:CVE-2018-8292 DESCRIPTION: Microsoft .NET Core could allow a remote attacker to obtain sensitive information, caused by an open redirect...

Debian: Security Advisory (DLA-3976-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

check-jsonschema 安全漏洞

check-jsonschema is a Python + JSON Schema open source CLI for jsonschema validation. A security vulnerability exists in check-jsonschema that stems from a default caching policy that uses the base name of a remote schema as the name of a file in the cache, e.g...

GHSA-FWXQ-3F52-5CMC Jenkins Filesystem List Parameter Plugin has Path Traversal vulnerability

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter. This allows attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system. Filesystem List Parameter Plugin 0.0.15 ensur...

MAL-2024-11085 Malicious code in seller-base-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 549e1b13f3619120c868b1fb3288e98dcb51622f31b63cccc7b3748b6555a332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-base-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 549e1b13f3619120c868b1fb3288e98dcb51622f31b63cccc7b3748b6555a332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: NVIDIA Base Command and Bright Cluster Managers - November 2024

NVIDIA has released a software update for NVIDIA Base Command and Bright Cluster Managers to address the security issues listed below. To protect your system, update the CMdaemon package on the head node and in software images. Go to NVIDIA Product Security...

Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in User Dashboards

Summary A vulnerability was reported in dashboard during pen testing. User's dashboard could be changed with a PUT request which did not check the user's identity, and this request enabled a user to change any dashboard the user has read access to. This bulletin contains information regarding the...

Astra Linux – Vulnerability in the 389-DS-base

A flaw was discovered in 389-ds-base. A specially crafted LDAP query may potentially cause a failure on the directory server, resulting in a denial of service...

CVE-2024-0138

NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

NVIDIA Base Command Manager 安全漏洞

NVIDIA Base Command Manager is a base command manager from NVIDIA Corporation. A security vulnerability exists in NVIDIA Base Command Manager that stems from a lack of authentication, successful exploitation of which could lead to code execution, denial of service, privilege escalation, informati...

CVE-2024-0138

NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2024-0138

CVE-2024-0138 affects NVIDIA Base Command Manager, specifically the CMDaemon, with a missing authentication vulnerability. Exact impacts listed include code execution, denial of service, privilege escalation, information disclosure, and data tampering. The NVIDIA bulletin states affected versions...