WordPress affiliate-toolkit Plugin <= 3.4.4 is vulnerable to Sensitive Data Exposure

Software affiliate-toolkit Type Plugin Vulnerable versions = 3.4.4 Fixed in 3.4.5 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-37205 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 304bb1692328 Credits Joshua...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through specially created API requests...

The vulnerability of the Rust library for working with Git repositories like gitoxide is related to shortcomings in the path name checking process for Windows. This allows an attacker to trigger a denial-of-service attack.

The vulnerability of the Rust library for working with Git repositories like gitoxide is related to shortcomings in the path name checking process for Windows. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. Attackers have exploited the vulnerability to cause SMMU failures...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from the use of WARN when coding fails, resulting in a crash...

The vulnerability of the network routing implementation software on Unix-like systems, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software for implementing network routing on Unix-like systems is related to improper processing of the BGP UPDATE message sent with EOR. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

GHSA-3J4H-H3FP-VWWW LNbits improperly handles potential network and payment failures when using Eclair backend

Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

Using AI for Political Polling

Public polling is a critical function of modern political campaigns and movements, but it isnt what it once was. Recent US election cycles have produced copious postmortems explaining both the successes and the flaws of public polling. There are two main reasons polling fails. First, nonresponse...

Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

GHSA-M96R-7VQM-J95G Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

PT-2024-40366

Name of the Vulnerable Software and Affected Versions OSV affected versions not specified Description A security issue has been found where login failures are logged on the default stream with log level "warning", including plain-text user credentials. Recommendations At the moment, there is no...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the "warning" level instead of the "debug" level, which exposes plain text credential information...

The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

PT-2024-26913 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.11.2 Description: Directus is a real-time API and App dashboard for managing SQL database content. Providing a non-numeric length value to the random string generation utility will create a memory issue, breaking...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to execute arbitrary code and disclose protected information.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the assignment of a zero pointer. Exploiting this vulnerability allows an attacker to cause system failures and disclose sensitive information...

ruby:3.0 security update

ruby 3.0.7-143 - Fix Zlib test failures on s390x due to HW acceleration Related: RHEL-36189 3.0.7-142 - Upgrade to Ruby 3.0.7. Resolves: RHEL-36189 - Fix HTTP response splitting in CGI. Resolves: RHEL-36193 - Fix ReDoS vulnerability in URI. Resolves: RHEL-36196 - Fix ReDoS vulnerability in Time...

GHSA-WJ85-RG5G-V8JM TYPO3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

AZL-67991 CVE-2024-36909 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resultin...

PT-2024-40500 · Osv · Osv

Name of the Vulnerable Software and Affected Versions: OSV affected versions not specified Description: A security issue has been found where login failures are logged on the default stream with log level "warning", including plain-text user credentials. Recommendations: At the moment, there is n...

The vulnerability of the CONNECT component of the Eclipse Mosquitto messaging broker, which allows a hacker to trigger a service failure.

The vulnerability of the CONNECT component of the Eclipse Mosquitto messaging broker is related to the allocation of memory based on an unreliable large value. Exploiting this vulnerability can allow a malicious actor to cause service failures...