13369 matches found
CVE-2023-5791
The CVE-2023-5791 entry concerns SourceCodester Sticky Notes App 1.0. An XSS vulnerability exists in the file endpoint/add-note.php, triggered by manipulating the noteTitle/noteContent parameters. A remote attack is possible, and the exploit has been disclosed publicly. Multiple connected records...
PT-2023-32330 · Sourcecodester · Sourcecodester Sticky Notes App
Name of the Vulnerable Software and Affected Versions: SourceCodester Sticky Notes App version 1.0 Description: A critical vulnerability has been found in the SourceCodester Sticky Notes App, affecting the file endpoint/delete-note.php. The manipulation of the note argument leads to SQL injection...
SourceCodester Sticky Notes Cross-Site Scripting Vulnerability
SourceCodester Sticky Notes is a sticky notes application. A security vulnerability exists in SourceCodester Sticky Notes version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters noteTitle/noteContent in the file endpoint/add-note.php...
PT-2023-32329 · Unknown · Sourcecodester Sticky Notes App
Name of the Vulnerable Software and Affected Versions: SourceCodester Sticky Notes App version 1.0 Description: A vulnerability was found in the SourceCodester Sticky Notes App, affecting an unknown part of the file "endpoint/add-note.php". The manipulation of the arguments noteTitle and...
Fedora 38 : bind9-next (2023-a48c162033)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a48c162033 advisory. - Upstream release notes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
CVE-2023-39817
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates
Red Hat Advanced Cluster Management for Kubernetes 2.8.3 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
Fedora 37 : dotnet7.0 (2023-8a285519da)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8a285519da advisory. This the October 2023 monthly update for .NET 7 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.12/7.0.12.md Tenable has...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.18 security update
Red Hat OpenShift Container Platform release 4.13.18 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whi...
CLSA-2023-1698101945 Fix of 7 CVEs
CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22044, CVE-2023-22045, CVE-2023-22049, CVE-2023-25193. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-July/024064.html...
GHSA-V65R-P3VV-JJFV TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Impact A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE’s core undo and redo functionality. When a carefully-crafted HTML snippet passes the XSS sanitisation layer, it is manipulated as a string by internal trimming functions before being stored in the undo stack. If t...
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Impact A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE’s core undo and redo functionality. When a carefully-crafted HTML snippet passes the XSS sanitisation layer, it is manipulated as a string by internal trimming functions before being stored in the undo stack. If t...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.11.52 bug fix and security update
Red Hat OpenShift Container Platform release 4.11.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.39 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
Elon Musk’s Main Tool for Fighting Disinformation on X Is Making the Problem Worse, Insiders Claim
X is promoting Community Notes to solve its disinformation problems, but some former employees and people who currently contribute notes say it’s not fit for that purpose...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.5 release and security update
An update is now available for Red Hat JBoss Web Server 5.7.5 on Red Hat Enterprise Linux versions 7, 8, and 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
Important: nodejs
Issue Overview: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVE-2023-44487 Affected Packages: nodejs Issue Correction: Run dnf update nodejs...
Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update
An update is now available for Red Hat Ceph Storage 6.1 in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...
Improper Access Control
libfile.so is vulnerable to Improper Access Control. The vulnerability exists in dobidnote function at readelf.c due to improper restrictions which allows an attacker to perform unauthorized actions using a specially crafted .notes section...
