WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the...

HCL Notes 安全漏洞

HCL Notes is a highly secure local email client from HCL India. HCL Notes has a security vulnerability that allows an attacker to trigger a buffer overflow in HCL Notes via Message to trigger a denial of service and potentially run code...

HCL Notes 安全漏洞

HCL Notes is a highly secure local email client from HCL India. A security vulnerability exists in HCL Notes, which can be exploited by attackers to trigger a denial of service...

Important: Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 2.1.0 RPMs

Red Hat OpenShift Service Mesh 2.1.0 Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. The OpenShift Service Mesh release notes provide information on the features and...

The vulnerability of the incoming email processor in Redmine’s project and task management web application, related to improper authorization, allows a hacker to compromise data integrity.

The vulnerability of the incoming email processor in Redmine’s project and task management web application relates to the bypassing of the addissuenotes permission restrictions. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...

SUSE-RU-2021:3551-1 Recommended update for SUSE Manager 4.2.3 Release Notes

This update for SUSE Manager 4.2.3 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.3 - aarch64 support for CentOS 7/8, Oracle Linux 7/8, Rocky Linux 8, AlmaLinux 8, Amazon Linux 2 and openSUSE Leap 15.3 - Package Locking features is now available fo...

gibertshouse.reservadirecto.com Cross Site Scripting vulnerability OBB-2193026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

java-11-openjdk security and bug fix update

1:11.0.13.0.8-1.0.1 - link atomic for ix86 build 1:11.0.13.0.8-1 - Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz2012332 1:11.0.13.0.8-1 - Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is...

Hcl Technologies Hcl Traveler Companion 加密问题漏洞

Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. HCL Traveler Companion suffers from an encryption issue vulnerability that stems from the software's susceptibility to an iOS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.1.12 security fixes and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.1.12 General Availability release images, which provide security fixes and update the container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

CVE-2021-35571

Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-35571

Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft component: Advising Notes. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-35571

CVE-2021-35571 affects Oracle PeopleSoft Enterprise CS Academic Advisement (component: Advising Notes) on PeopleSoft 9.2. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to perform unauthorized updates/inserts/deletes and read sensitive data within Advising Notes....

Moderate: Red Hat Enhancement Advisory: OpenShift Sandboxed Containers 1.1.0 update

An update to OpenShift sandboxed containers 1.1.0 is now available. OpenShift sandboxed containers support for OpenShift Container Platform provides users with built-in support for running Kata containers as an additional optional runtime. This advisory contains an update for OpenShift sandboxed...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.3 bug fix, security, and image updates

Red Hat Advanced Cluster Management for Kubernetes 2.3.3 General Availability release images, which fix bugs, provide security fixes, and update container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS ba...

java-1.8.0-openjdk security and bug fix update

1:1.8.0.312.b07-1 - Update to aarch64-shenandoah-jdk8u312-b07 EA - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2011826 1:1.8.0.312.b05-0.4.ea - Allow plain key import to be disabled with...

java-11-openjdk security update

1:11.0.13.0.8-1 - Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2012333 1:11.0.13.0.7-0.1.ea - Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Update...

java-1.8.0-openjdk security and bug fix update

1:1.8.0.312.b07-1 - Update to aarch64-shenandoah-jdk8u312-b07 EA - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2011826 1:1.8.0.312.b05-0.3.ea - Add patch to improve performance of common separato...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.0 bug fix and security update

Red Hat OpenShift Container Platform release 4.9.0 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks. As a contributor, create/edit a "QR Redirect" and set the following fields: "URL to Redirect to": https://example.com/"...