CVE-2024-27138

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a version of Apache Archiva that fixes this issue...

CVE-2024-21490

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in...

CVE-2024-0842: Uncontrolled Resource Consumption

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restoreins.php file and. This makes it possible for unauthenticated attackers to make excessive...

PT-2024-20594 · Node.Js +1 · Node.Js +1

Name of the Vulnerable Software and Affected Versions: pkg affected versions not specified Description: The issue arises from the pkg tool writing native code packages to a hardcoded directory, specifically /tmp/pkg/ on Unix systems, which is a shared directory for all users on the same local...

DRUPAL-CONTRIB-2024-008

The Migrate Tools module provides tools for running and managing Drupal migrations. The module doesn't sufficiently protect against Cross Site Request Forgery under specific scenarios allowing an attacker to trick an authenticated administrator into initiating a migration. This vulnerability is...

Migrate Tools - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-008

The Migrate Tools module provides tools for running and managing Drupal migrations. The module doesn't sufficiently protect against Cross Site Request Forgery under specific scenarios allowing an attacker to trick an authenticated administrator into initiating a migration. This vulnerability is...

PT-2024-10358 · Drupal · Migrate Tools

Name of the Vulnerable Software and Affected Versions: Migrate Tools versions 0.0.0 through 6.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Migrate Tools module of the Drupal CMS system. This vulnerability can be exploited by a remote attacker to...

WordPress Backuply – Backup, Restore, Migrate and Clone Plugin <= 1.2.3 is vulnerable to Directory Traversal

Software Backuply – Backup, Restore, Migrate and Clone Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A6: Security Misconfiguration Classification Directory Traversal CVE CVE-2024-0697 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 3064782c188c Credit...

CVE-2024-0697: Improper Limitation of a Pathname to a Restricted Directory

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the nodeid parameter in the backuplygetjstree function. This makes it possible for attackers with administrator privileges or higher to read...

PT-2024-40943 · Unknown +1 · Conrod Core +1

Name of the Vulnerable Software and Affected Versions: conrod versions 0.62.0 and earlier Description: The issue concerns the conrod crate, which has been deprecated since version 0.62.0. Its functionality was split across multiple crates, with core functionality transferred to conrod core. If...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2023-1262)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to loc...

CVE-2023-6505

The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...

PT-2024-14982 · WordPress · Migrate Wordpress Website & Backups

Name of the Vulnerable Software and Affected Versions: Migrate WordPress Website & Backups WordPress plugin versions prior to 1.9.3 Description: The issue concerns the Migrate WordPress Website & Backups WordPress plugin, which does not prevent directory listing in sensitive directories containin...

WordPress Plugin Migrate WordPress Website & Backups Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

CVE-2023-6505: Undefined Security Weakness

The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...

GO-2023-2385 Insufficient entropy in AES-256-CBC in github.com/pubnub/go

There is insufficient entropy in the implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt functions are less secure when hex encoding and trimming are applied, leaving half of the bits in the key always the same for every encoded message or file. Users are encouraged to...

PT-2023-36301 · Unknown · Distribution

Name of the Vulnerable Software and Affected Versions: distribution versions prior to 2.8.3 Description: The issue is related to several problems in the distribution package, including the parsing of errors as JSON, the handling of HTTP request bodies, and the deprecation of certain functions and...

How to migrate to new vcenter host connection

Change Citrix to the new vCenter server...

kernel: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()

A flaw was found in the Linux kernel's AMD Kernel Fusion Driver AMDKFD. In specific error conditions, an object holding a NULL value is used, causing a NULL pointer dereference and resulting in a denial of service...

kernel: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()

A flaw was found in the Linux kernel's AMD Kernel Fusion Driver AMDKFD. In specific error conditions, an object holding a NULL value is used, causing a NULL pointer dereference and resulting in a denial of service...