CVE-2022-26104: Missing Authorization

SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message...

D-Link Dsl-2730E Cross-Site Scripting Vulnerability

D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2022:40696-1 Rating: important References: 1195230 1195682 Cross-References: CVE-2022-22753 CVE-2022-22754 CVE-2022-22756 CVE-2022-22759 CVE-2022-22760 CVE-2022-22761 CVE-2022-22763 CVE-2022-22764 Affected...

GOOSE Protocol Code Execution

The vulnerability of the GOOSE Generic Object-Oriented Substation Event protocol implementation in Schneider Electric Easergy P3 microprogrammable devices for relay protection and control systems lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability...

GOOSE Protocol Code Execution

The vulnerability of the GOOSE Generic Object-Oriented Substation Event protocol implementation in Schneider Electric Easergy P5 relay protection and control devices relates to the copying of buffers without checking the size of input data. Exploiting this vulnerability can allow attackers to...

Virtuozzo Hybrid Infrastructure 5.0 Update 1 (5.0.1-42)

This update provides support for more guest operating systems, as well as bug fixes and improvements. Vulnerability id: VSTOR-50067 Fixed the false-positive alert "Swap space is used." Vulnerability id: VSTOR-51196 Fixed the false-positive alert "Disk may run out of space" that appears for a cach...

WordPress CMP - Coming Soon & Maintenance Plugin < 4.0.19 CSS Update Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WeBankPartners wecube-platform目录遍历漏洞

WeCube is a set of open source , one-stop It architecture management and operation and maintenance management tools . WeBankPartners wecube-platform version has a directory traversal vulnerability, which can be exploited to traverse the server directory...

WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor plugin <= 1.3.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor plugin versions = 1.3.1. Solution No patched version available...

WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Rocket Maintenance Mode & Coming Soon Page plugin versions = 4.2. Solution Update the WordPress Rocket Maintenance Mode & Coming Soon Page plugin to the latest available version at least 4.3...

WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Rocket Maintenance Mode & Coming Soon Page plugin versions = 4.2. Solution Update the WordPress Rocket Maintenance Mode & Coming Soon Page plugin to the latest available version at least 4.3...

WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor plugin <= 1.3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor plugin versions = 1.3.1. Solution No patched version available...

GSD-2022-1000625 KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance

KVM: arm64: pkvm: Use the mmops indirection for cache maintenance This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28899

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue concerns the use of mm ops indirection for cache maintenance in the KVM arm64 pkvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

From Pet Systems to Cattle Farm — What Happened to the Data Center?

There's something about craftsmanship. It's personal, its artistry, and it can be incredibly effective in achieving its goals. On the other hand, mass-market production can be effective in other ways, through speed, efficiency, and cost savings. The story of data centers is one of going from...

SUSE: Security Advisory (SUSE-SU-2022:14896-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-24409

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability...

Spoofing

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability...

CVE-2022-24409

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability...

WordPress Coming soon and Maintenance mode plugin跨站请求伪造漏洞

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. The vulnerability is caused by the plugin's unauthorized and CSRF-checked in its comingsoonsendma...