cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-28233 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-28233 Source advisory: OSV:GHSA-7R3H-4PH8-W38G...

ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-29033 via oauthenticator (14.0.0)

oauthenticator PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

CVE-2023-49339: Authorization Bypass Through User-Controlled Key

Ellucian Banner 9.17 allows Insecure Direct Object Reference IDOR via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint...

F5 Networks BIG-IP : SSB Variant 4 vulnerability (K29146534)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K29146534 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the...

Oracle Linux 7 : qemu (ELSA-2018-4198)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4198 advisory. - i386: Define the Virt SSBD MSR and handling of it CVE-2018-3639 Konrad Rzeszutek Wilk Orabug: 28110449 CVE-2018-3639 - i386: define the AMD 'virt-ssbd' CPUID...

ssb-do.de Cross Site Scripting vulnerability OBB-3434008

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

K29146534: SSB Variant 4 vulnerability CVE-2018-3639

Security Advisory Description Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel...

ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2022-31027 via oauthenticator (14.0.0)

oauthenticator PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2022-31027 Source advisory: OSV:PYSEC-2022-206...

ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2022-31027 via oauthenticator (14.0.0)

oauthenticator PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2022-31027 Source advisory: OSV:GHSA-R7V4-JWX9-WX43...

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +4 more potentially affected by CVE-2022-31027 via oauthenticator (>=0.13.0, <=14.2.0)

oauthenticator PYPI version =0.13.0, =0.11.0, =0.9.1, =3.0.0, =0.30.1, =0.2.25, =0.0.2, =0.4.2 Source cves: CVE-2022-31027 Source advisory: MEND:CVE-2022-31027...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu: Security Advisory (USN-5137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5137-1: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)

jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: GHSA-CW7P-Q79F-M2V7...

cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)

jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: OSV:GHSA-CW7P-Q79F-M2V7...

cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)

jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: OSV:PYSEC-2021-386...

cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)

jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: MEND:CVE-2021-41247...

USN-5115-1: Linux kernel (OEM) vulnerabilities

It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information WiFi network traffic. CVE-2020-3702 Ofek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk discovered that the BPF...

CVE-2021-24486: Improper Neutralization of Input During Web Page Generation

The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and likebuttonsize parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress...