OPENSUSE-SU-2024:14543-1 obs-scm-bridge-0.5.4-1.1 on GA media

These are all security issues fixed in the obs-scm-bridge-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-11853

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-11853 jAlbum Bridge <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-11853

CVE-2024-11853: The jAlbum Bridge plugin for WordPress (versions up to and including 2.0.15) is vulnerable to Stored Cross-Site Scripting via the ar parameter. An authenticated attacker with Contributor-level access can inject scripts that execute in pages viewed by users. A patch/upgrade to a ve...

CVE-2024-11853 jAlbum Bridge <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

WordPress plugin jAlbum Bridge 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-17294 · WordPress · Jalbum Bridge

Name of the Vulnerable Software and Affected Versions: jAlbum Bridge plugin for WordPress versions up to, and including, 2.0.15 Description: The issue is related to Stored Cross-Site Scripting via the ar parameter due to insufficient input sanitization and output escaping. This allows authenticat...

WordPress jAlbum Bridge plugin <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via ar Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin jAlbum Bridge versions = 2.0.15...

CLSA-2024-1733142550 Fix of 13 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64tomsecs - PM / devfreq: Modify the indentation of transstat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in transstatshow Bionic update: upstream...

Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11142 Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11131 Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20241129-01

A vulnerability in the ks8851 component of the Linux operating system kernel is related to improper locking in the ks8851dbgdumpkkt, ks8851rxpkts, and ks8851irq functions in the drivers/net/ethernet/micrel/ks8851common.c. Exploitation of the vulnerability could allow an attacker to cause a denial...

CVE-2024-22038

Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...

CVE-2024-22038 DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge

Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...

CVE-2024-22038 DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge

Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...

CVE-2024-22038

CVE-2024-22038 is addressed in SUSE advisories for obs-scm-bridge. The affected component is obs-scm-bridge, updated to version 0.5.4 which fixes DoS attacks and information leaks when Git repositories are crafted. Public references in SUSE/SUSE-SU-2024:4212-1 and SUSE-SU-2025:0857-1 indicate the...

PT-2024-19171

Name of the Vulnerable Software and Affected Versions obs-scm-bridge affected versions not specified Description The issue allows attackers to create specially crafted git repositories, potentially leading to information leakage or denial of service. Recommendations At the moment, there is no...

Malicious code in nativeapp-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601796ef5b39de8db08b381b6fee4e5ca0cc201bd02aff6c9cb796c10c1480bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...