867 matches found
WordPress plugin WPIDE 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
VM images built with Image Builder and Proxmox provider use default credentials
CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the image build process. Additionally, virtual machine images built using the Proxmox provider do not disable these default...
SUSE-SU-2024:3458-1 Security update for kubernetes1.24
This update of kubernetes1.24 fixes the following issues: - rebuild the package with the current go 1.23 security release bsc1229122...
SUSE-SU-2024:3454-1 Security update for kubernetes1.28
This update of kubernetes1.28 fixes the following issues: - rebuild the package with the current go 1.23 security release bsc1229122...
CVE-2024-46765
In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a mutex The main threat to data consistency in icexdp is a possible asynchronous PF reset. It can be triggered by a user or by TX timeout handler. XDP setup and PF reset code access the same...
WordPress Plugin "Forminator" vulnerable to cross-site scripting
Overview WordPress Plugin "Forminator" provided by WPMU DEV assists building web forms. When accessing the page including the web form created with Forminator, some information from the URL may be embedded to the web form. This feature processes the embedded information improperly, leading to...
JVN#65724976: WordPress Plugin "Forminator" vulnerable to cross-site scripting
WordPress Plugin "Forminator" provided by WPMU DEV assists building web forms. When accessing the page including the web form created with Forminator, some information from the URL may be embedded to the web form. This feature processes the embedded information improperly, leading to cross-site...
SUSE-SU-2024:3144-1 Security update for hdf5, netcdf, trilinos
This update for hdf5, netcdf, trilinos fixes the following issues: hdf5 was updated from version 1.10.8 to 1.10.11: - Security issues fixed: CVE-2019-8396: Fixed problems with malformed HDF5 files where content does not match expected size. bsc1125882 CVE-2018-11202: Fixed that a malformed file...
buildah security update
1.33.7-4.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.7-4 - rebuild for CVE-2024-24783 - Resolves: RHEL-28428...
Moderate: Red Hat Bug Fix Advisory: updated RHDH-1.1-RHEL-9 container images
Updated RHDH-1.1-RHEL-9 container images are now available The RHDH-1.1-RHEL-9 container images have been updated to address the following security advisory: RHSA-2024:5529 see References Users of RHDH-1.1-RHEL-9 container images are advised to upgrade to these updated images, which contain...
PT-2024-32180
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The main threat to data consistency in ice xdp is a possible asynchronous PF reset, which can be triggered by a user or by TX timeout handler. XDP setup and PF reset code access the same...
bind security update
32:9.11.36-16.2 - Rebuild after CI change 32:9.11.36-16.1 - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name 32:9.11.36-16 - Ensure incompatible dhcp is not accepted 32:9.11.36-15 - Ensure incompatible bind-dyndb-ldap is not...
kernel: ice: fix memory corruption bug with suspend and rebuild
This is a flaw in the Linux kernel's ICE driver for Intel Ethernet controllers. The problem arises when the system enters a suspended state, and the driver frees queue vectors without resetting the numqvectors variable. This oversight causes the icerebuild function to allocate an incorrectly size...
Moderate: Red Hat Bug Fix Advisory: updated el8/flatpak-sdk container image
Updated el8/flatpak-sdk container image is now available for Red Hat Enterprise Linux 8. The el8/flatpak-sdk container image has been updated for Red Hat Enterprise Linux 8 to address the following security advisory: RHSA-2024:5101 see References Users of el8/flatpak-sdk container images are...
SUSE-SU-2024:2422-1 Security update for cni-plugins
This update of cni-plugins fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...
Oracle Linux 9 : buildah (ELSA-2024-4371)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4371 advisory. - rebuild for CVE-2024-1394 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:1988-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1988-1 advisory. Rebuild against current updated packages and go compiler. - Bump github.com/containers/image/v5 bsc1224119, CVE-2024-3727 - Ad...
SUSE-SU-2024:1988-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Rebuild against current updated packages and go...
Oracle Linux 8 : container-tools:ol8 (ELSA-2024-3254)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3254 advisory. aardvark-dns buildah 2:1.33.7-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33...