kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups

A double-free flaw was found in the Linux kernel ConnectX-4 and Connect-IB cards in the Mellanox driver. This issue could allow a local user to crash the system...

kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups

A double-free flaw was found in the Linux kernel ConnectX-4 and Connect-IB cards in the Mellanox driver. This issue could allow a local user to crash the system...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-38355]

Summary Socket.IO is used by IBM App Connect Enterprise Certified Container for real-time UI updates. IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in...

PT-2024-9035 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 and 9.1R18.7 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to argument injection in Ivanti Connect Secure and Ivanti Policy Secure, which can be exploited by...

PT-2024-9034 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 and prior to 9.1R18.7 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to argument injection, allowing a remote authenticated attacker with admin privileges to...

PT-2024-9036 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions 22.7R2.1 and earlier, 9.1R18.7 and earlier Ivanti Policy Secure versions 22.7R1.1 and earlier Description: The issue is related to argument injection in Ivanti Connect Secure and Ivanti Policy Secure, which can ...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in resource management errors, which allow attackers to cause service failures.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted queries...

webmap.arcticconnect.ca Cross Site Scripting vulnerability OBB-3938618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3852 Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2779 Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2780 Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37228

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

CVE-2024-37228

CVE-2024-37228 concerns InstaWP Connect (InstaWP Team) with an unauthenticated Arbitrary File Upload vulnerability. Public details indicate the flaw affects InstaWP Connect versions up to 0.1.0.38, enabling code/file upload without authentication due to improper handling during upload workflows. ...

PT-2024-27397 · Unknown · Instawp Connect

Name of the Vulnerable Software and Affected Versions: InstaWP Connect versions 0.1.0.38 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection. Recommendations: For InstaWP Connect versions 0.1.0.38 a...