RHEL 8 : container-tools:4.0 (RHSA-2023:6938)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6938 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: go-yaml:...

RHEL 8 : container-tools:rhel8 (RHSA-2023:6939)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6939 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: go-yaml:...

CVE-2023-48217: Improper Control of Generation of Code

Statamic is a flat-first, Laravel + Git powered CMS designed for building websites. In affected versions certain additional PHP files crafted to look like images may be uploaded regardless of mime type validation rules. This affects front-end forms using the "Forms" feature, and asset upload fiel...

GHSA-72HG-5WR5-RMFC Statamic CMS remote code execution via front-end form uploads

Impact On front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded regardless of mime validation rules. This only affects forms using the "Forms" feature and not just any arbitrary form. This does not affect the control panel. Patches It has been patched i...

Statamic CMS remote code execution via front-end form uploads

Impact On front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded regardless of mime validation rules. This only affects forms using the "Forms" feature and not just any arbitrary form. This does not affect the control panel. Patches It has been patched i...

CVE-2023-32502

Cross-Site Request Forgery CSRF vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin = 1.0.7 versions...

CVE-2023-32502

Cross-Site Request Forgery CSRF vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin = 1.0.7 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin = 1.0.7 versions...

CVE-2023-32502 WordPress Pro Mime Types plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in Sybre Waaijer Pro Mime Types pro-mime-types.This issue affects Pro Mime Types: from n/a through = 1.0.7...

CVE-2023-32502

CVE-2023-32502 affects WordPress Pro Mime Types (Sybre Waaijer Pro Mime Types – Manage file media types) plugin versions 1.0.7 (i.e., 2.0.0 or newer) remediates the CSRF exposure. Patch severity is medium per Patchstack, and the CVE entry references CSRF without describing exploitable vectors bey...

CVE-2023-32502 WordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin = 1.0.7 versions...

WordPress Plugin Pro Mime Types - Manage file media types Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Pro Mime Types - Manage fi...

PT-2023-23836 · WordPress · Sybre Waaijer Pro Mime Types

Name of the Vulnerable Software and Affected Versions: Sybre Waaijer Pro Mime Types – Manage file media types plugin versions = 1.0.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

CVE-2023-32502: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sybre Waaijer Pro Mime Types – Manage file media types plugin = 1.0.7 versions...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...

golang: net/http, mime/multipart: denial of service from excessive resource consumption

A flaw was found in Go, where it is vulnerable to a denial of service caused by an excessive resource consumption flaw in the net/http and mime/multipart packages. By sending a specially-crafted request, a remote attacker can cause a denial of service...

Moderate: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

golang: net/http, mime/multipart: denial of service from excessive resource consumption

A flaw was found in Go, where it is vulnerable to a denial of service caused by an excessive resource consumption flaw in the net/http and mime/multipart packages. By sending a specially-crafted request, a remote attacker can cause a denial of service...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...