Security Bulletin: Multiple IBM® Db2® security vulnerability fixes

Summary If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletins referred here to remedy the vulnerabilities. IBM® Db2® is affected by a vulnerability in the open source zlib library CVE-2023-45853 and IBM® Db2® is vulnerable to sensitive...

CVE-2024-37550

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Envato Template Kit – Export allows Stored XSS.This issue affects Template Kit – Export: from n/a through 1.0.22...

CVE-2024-37550

CVE-2024-37550 describes an Stored XSS in the WordPress plugin Template Kit – Export from Envato. Affected range listed: from n/a through 1.0.22. The description explicitly states Stored XSS via input during web page generation, implying exploit could occur when rendering pages that incorporate u...

CVE-2024-37550 WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Envato Template Kit – Export allows Stored XSS.This issue affects Template Kit – Export: from n/a through 1.0.22...

SUSE CVE-2024-6540

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has be...

CVE-2024-6540

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has be...

CVE-2024-6540

CVE-2024-6540 affects OTRS where the export function in the external-ticket-overview can disclose ticket-level data. The root cause is improper filtering of fields during export when the TicketSearchLegacyEngine is disabled by an admin, allowing an authorized user to download a list of tickets co...

PT-2024-37700 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 8.0.X through 2024.4.x OTRS version 2023.X Description: The issue is related to improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS. This could allow an authorized...

How to Export a Virtual Machine to an External USB Drive

This article describes how to export a XenServer Virtual Machine VM to a USB storage device...

How to Export Target Devices into a .CSV File

This article details how to export Target Devices from a Provisioning Services PVS database in a formatted Comma Separated Values CSV file. Requirements SQL Server Management Studio or bcp.exe, both of which are components of a full SQL Server or SQL Server Express install...

How to Export and Import StoreFront Subscription Database

This article explains how to export and import a StoreFront Subscription Database...

IPC Error when Exporting the vDisk on Provisioning Services

IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...

WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability

Sensitive Data Exposure via Export File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.99...

WordPress plugin Form Vibes security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

What’s New in Rapid7 Products & Services: Q2 2024 in Review

This quarter we continued to make investments that provide security professionals with a holistic, actionable view of their entire attack surface. In Q2, we focused on enhancing visualization, prioritization, and integration capabilities across our key products and services. Below we’ve highlight...

WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

Sensitive Data Exposure via Exported File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Wallet System for WooCommerce versions = 2.5.13...

CVE-2024-39900

OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when...

MAL-2024-7436 Malicious code in your-types-export-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47fc8ae445df009de5ffc57a7e7a8a133c700db9f72c38f9c1ace0f66c562be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-types-export-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47fc8ae445df009de5ffc57a7e7a8a133c700db9f72c38f9c1ace0f66c562be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Template Kit – Export plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mahesh Nagabhairava Patchstack Alliance in WordPress Plugin Template Kit – Export versions = 1.0.23...