PT-2024-17291 · WordPress · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush plugin for WordPress versions up to, and including, 8.71 Description: The issue concerns a lack of capability check in the idea push taxonomy save routine function, allowing authenticated attackers with Subscriber-level access and...

The vulnerability of the Agile Boards component of the software tool for project and task management, JetBrains YouTrack, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Agile Boards component of the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

CVE-2024-37226 WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21...

WordPress plugin Kanban Boards for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-27395 · WordPress · Kanban Boards For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban Boards for WordPress versions through 2.5.21 Description: The issue affects Kanban Boards for WordPress due to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

CVE-2024-50578

Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

PT-2024-7635 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability in the Agile Boards page of JetBrains YouTrack. This vulnerability can be exploited by an attacker to conduct cross-site scripti...

Cyber Threats Targeting the US Government During the Democratic National Convention

Cyber Threats Targeting the US Government During the Democratic National Convention By Anne An · October 2, 2024 Introduction Trellix global sensors detected increased threat activities during the days that the Democratic National Convention DNC was held in August 2024, culminating into a massive...

SUSE CVE-2024-46793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

DEBIAN-CVE-2024-46793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

UBUNTU-CVE-2024-46793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793 ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793 ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793

CVE-2024-46793 affects the Linux kernel (ASoC: Intel boards) and resolves a NULL pointer dereference on BYT/CHT boards caused by dummy codec handling. The issue originated from creating a zero-sized dummy codec array (static struct snd_soc_dai_link_component dummy[]) and a subsequent dais[i].code...