Cross-site Scripting (XSS)

Overview org.webjars.npm:react-draft-wysiwyg is an A wysiwyg on top of DraftJS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag. Details Cross-site scripting or XSS is a code vulnerability...

Cross-site Scripting (XSS)

Overview react-draft-wysiwyg is an A wysiwyg on top of DraftJS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag. Details Cross-site scripting or XSS is a code vulnerability that occurs whe...

CVE-2024-10493

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows WordPress plugin before 5.10.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the...

[SECURITY] Fedora 40 Update: php-8.3.14-1.fc40

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

HTTP/3 support in Reactor 2024.0 Release Train

HTTP/3, the latest major version of the Hypertext Transfer Protocol, had its specification finalized in June 2022. This version is designed to enhance performance, reliability, and security. Unlike its predecessors, HTTP/3 utilizes QUIC instead of TCP as its transport layer. QUIC is a UDP-based,...

CVE-2022-43935

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file...

CVE-2022-43935 Switch passwords and authorization IDs are printed in the embedded MLS DB file

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file...

CVE-2022-43935 Switch passwords and authorization IDs are printed in the embedded MLS DB file

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file...

Red Hat Keycloak Trust Management Vulnerabilities

Red Hat Keycloak is a suite of software from Red Hat USA that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that stems from sensitive data being embedded as a default value in bytecode or environment...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

io.debezium:debezium-connector-mongodb (0.6.0), io.debezium:debezium-connector-mysql (0.6.0) +2 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.6.0)

io.debezium:debezium-core MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mongodb 0.6.0 - io.debezium:debezium-connector-mysql 0.6.0 -...

io.debezium:debezium-connector-mongodb (0.8.0.final), io.debezium:debezium-connector-mysql (0.8.0.final) +4 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.8.0.final)

io.debezium:debezium-core MAVEN version 0.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mongodb 0.8.0.final - io.debezium:debezium-connector-mysql 0.8.0.final -...

io.debezium:debezium-connector-mysql (0.1.0), io.debezium:debezium-embedded (0.1.0) potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.1.0)

io.debezium:debezium-core MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mysql 0.1.0 - io.debezium:debezium-embedded 0.1.0 Source cves: CVE-2023-1419...

io.debezium:debezium-connector-mongodb (0.3.2), io.debezium:debezium-connector-mysql (0.3.2) +1 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.3.2)

io.debezium:debezium-core MAVEN version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mongodb 0.3.2 - io.debezium:debezium-connector-mysql 0.3.2 -...

io.debezium:debezium-connector-mysql (0.2.0), io.debezium:debezium-embedded (0.2.0) potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.2.0)

io.debezium:debezium-core MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mysql 0.2.0 - io.debezium:debezium-embedded 0.2.0 Source cves: CVE-2023-1419...

io.debezium:debezium-connector-mysql (0.2.1), io.debezium:debezium-embedded (0.2.1) potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.2.1)

io.debezium:debezium-core MAVEN version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mysql 0.2.1 - io.debezium:debezium-embedded 0.2.1 Source cves: CVE-2023-1419...

io.debezium:debezium-connector-mysql (0.2.4), io.debezium:debezium-embedded (0.2.4) potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.2.4)

io.debezium:debezium-core MAVEN version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mysql 0.2.4 - io.debezium:debezium-embedded 0.2.4 Source cves: CVE-2023-1419...

io.debezium:debezium-connector-mongodb (0.3.0), io.debezium:debezium-connector-mysql (0.3.0) +1 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.3.0)

io.debezium:debezium-core MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mongodb 0.3.0 - io.debezium:debezium-connector-mysql 0.3.0 -...

com.networknt:eventuate-cdcserver (0.1.0), io.debezium:debezium-connector-mongodb (0.3.1) +2 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.3.1)

io.debezium:debezium-core MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - com.networknt:eventuate-cdcserver 0.1.0 - io.debezium:debezium-connector-mongodb 0.3.1 -...

io.debezium:debezium-connector-mongodb (0.3.6), io.debezium:debezium-connector-mysql (0.3.6) +2 more potentially affected by CVE-2023-1419 via io.debezium:debezium-core (0.3.6)

io.debezium:debezium-core MAVEN version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-core and may be impacted: - io.debezium:debezium-connector-mongodb 0.3.6 - io.debezium:debezium-connector-mysql 0.3.6 -...