3176 matches found
pcs security update
0.11.1-10.el90.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081333 0.11.1-10 - Fixed snmp client - Fixed translating resource roles in colocation constraint - Resolves: rhbz2048640 0.11.1-9 - Fixed cluster destroy in web ui - Fixed covscan issue in web ui - Resolves:...
WordPress Jquery Validation For Contact Form 7 plugin <= 5.2 - Arbitrary Options Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Options Update via Cross-Site Request Forgery CSRF vulnerability discovered by Gibran Abdillah in WordPress Jquery Validation For Contact Form 7 plugin versions = 5.2. Solution Update the WordPress Jquery Validation For Contact Form 7 plugin to the latest available version at least 5.3...
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like defaultrole, userscanregister via a CSRF attack PoC...
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like defaultrole, userscanregister via a CSRF attack...
Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities
Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.1.7 FP5. These vulnerabilities have also been previously addressed in IBM Cognos Analytics 11.2.2. The following 3rd party components are used by IBM Cognos Analytics: Apache Axis is a Java based Web Services engine f...
MAL-2022-7195 Malicious code in wm-jquery (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec0290c986c17e81178198c358d612fb49b72f2059784595fd25dad35d719b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wm-jquery (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec0290c986c17e81178198c358d612fb49b72f2059784595fd25dad35d719b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wm-jquery
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in wm-jquery-shadow-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7196 Malicious code in wm-jquery-shadow-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wm-jquery-shadow-dom
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in jquery-querybuilder
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in jquery-querybuilder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57bfd8522bd1fa5221cea1ce468e61ef81bfcdcb45d394c11ad4adf9c05c270e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4051 Malicious code in jquery-querybuilder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57bfd8522bd1fa5221cea1ce468e61ef81bfcdcb45d394c11ad4adf9c05c270e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jquery-lh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50689d87596c591d0c3b5868d3e2d376462fc24259cf3e4119424aa4842b0bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in jquery-lh
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-4050 Malicious code in jquery-lh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50689d87596c591d0c3b5868d3e2d376462fc24259cf3e4119424aa4842b0bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022
Summary In addition to many updates of open source packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.2-IF011 and 21.0.3-IF009. Vulnerability Details CVEID:CVE-2021-44906 DESCRIPTION: Node.js Minimist module could allow a remote attacker...
