CVE-2024-9023 WP-WebAuthn <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode

The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wwaloginform shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

[SECURITY] [DSA 5773-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5773-1 [email protected] https://www.debian.org/security/ Andres Salomon September 19, 2024 https://www.debian.org/security/faq -...

BELL-CVE-2024-46722

Bulletin has no description...

CVE-2024-46789

In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s-flags in the alloctaggingslabfreehook When enable CONFIGMEMCG & CONFIGKFENCE & CONFIGKMEMLEAK, the following warning always occurs,This is because the following call stack occurred: mempoolalloc...

About the security content of watchOS11

About the security content of watchOS11 This document describes the security content of watchOS 11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2024-29847

creationtimestamp| type| source ---|---|--- 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1369 2024-09-11 06:44:07+00:00| seen| https://t.me/CyberSecurityIL/56283 2024-09-11 08:37:51+00:00| seen| https://t.me/thehackernews/5556 2024-09-11 11:01:08+00:00| seen|...

[SECURITY] [DLA 3877-1] ruby-sinatra security update

Debian LTS Advisory DLA-3877-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof September 05, 2024 https://wiki.debian.org/LTS Package : ruby-sinatra Version : 2.0.8.1-2+deb11u1 CVE ID : CVE-2022-29970 CVE-2022-45442 Debian Bug : 1014717 1070953 Sinatra is an op...

[SECURITY] [DLA 3869-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3869-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 04, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3866-1] ruby-tzinfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3866-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 03, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5763-1] pymatgen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5763-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5761-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5761-1 [email protected] https://www.debian.org/security/ Andres Salomon August 29, 2024 https://www.debian.org/security/faq -...

PT-2024-10897 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-7712 - CVE-2021-26176: TRECK Operating System Command Injection", "Content": "CVE ID : CVE-2024-7712 Published : Aug. 30, 2024, 4:15 p.m. | 44 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering...

PT-2024-38046 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue's details are not provided due to the withdrawal of the CVE ID by the CVE Numbering Authority. Recommendations: At the moment, there i...

PT-2024-29907 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are provided about the issue. Recommendations: At the...

[SECURITY] [DSA 5756-1] nova security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5756-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5751-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5751-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 19, 2024 https://www.debian.org/security/faq -...

Intel® Trace Analyzer and Collector Software Advisory

Summary: A potential security vulnerability in some Intel® Trace Analyzer and Collector software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28172 Description: Uncontrolled search path for...

Intel® Server Board S2600ST Family Firmware Advisory 

Summary: A potential security vulnerability in some Intel® Server Board S2600ST Family firmware may allow escalation of privilege. Intel is releasing software pdates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28947 Description: Improper input validation in...

Intel® MPI Library Software Advisory

Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28876 Description: Uncontrolled search path for some Intel® MPI...

Flexlm License Daemons for Intel® FPGA Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01107.html...