MAL-2024-2456 Malicious code in hearsay-design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_design_by_alison_page_paul_memmott_margo_neale_g9s88 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2085 Malicious code in @plangrid-private/design-system-components (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @b2bgeo/design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2084 Malicious code in @b2bgeo/design-system (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Loco Translate Plugin <= 2.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Loco Translate Type Plugin Vulnerable versions = 2.6.9 Fixed in 2.6.10 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-37236 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f02123bf72f2 Credits Nosa Shandy Required...

WordPress Groundhogg Plugin <= 3.4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Groundhogg Type Plugin Vulnerable versions = 3.4.2.3 Fixed in 3.4.3 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-37235 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4cc62fb9525a Credits Ananda Dhakal Patchstack...

CVE-2024-35325

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2024-35326

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2024-35328

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2024-34826

Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through = 1.6.4...

CVE-2024-34826 WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through = 1.6.4...

CVE-2024-34826 WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tobias Conrad Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler.This issue affects Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler: from n/a through 1.6.4...

CVE-2024-35329

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

bind, bind-dyndb-ldap, and dhcp security update

bind 32:9.11.4-26.P2.16 - Prevent increased CPU consumption in DNSSEC validator CVE-2023-50387 CVE-2023-50868 - Add missing design by contract tests to dnscatz - Speed up parsing of DNS messages with many different names CVE-2023-4408 - Do not use headerprev in expirelruheaders bind-dyndb-ldap...

Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-1559 Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology

Summary The IBM® Engineering System Design Rhapsody 10.0 iFix001, The IBM® Engineering System Design Rhapsody 9.0.2 iFix002 and The IBM® Engineering System Design Rhapsody 9.0.1 iFix006 contain fixes for vulnerabilities identified in the Vulnerabilities Details section. The refererred iFix versio...

WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.7 is vulnerable to Bypass Vulnerability

Software Contact Form Builder, Contact Widget Type Plugin Vulnerable versions = 2.1.7 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-35747 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8b7cdb65512f Credits Joshua Chan...

The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...