Juniper Junos OS Vulnerability (JSA79181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79181 advisory. - A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a...

Juniper Junos OS Vulnerability (JSA75728)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75728 advisory. - An Improper Input Validation vulnerability in Juniper Tunnel Driver jtd and ICMP module of Juniper Networks Junos OS Evolved allows an unauthenticated attacker within the...

Juniper Junos OS Vulnerability (JSA79187)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79187 advisory. - A Missing Synchronization vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on ACX5448 and ACX710 allows an unauthenticated, adjacent attacker...

Juniper Junos OS Vulnerability (JSA75746)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75746 advisory. - An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacen...

VMware Spring Framework < 5.3.34, 6.0.x < 6.0.19, 6.1.x < 6.1.6 SSRF Vulnerability - Linux

The VMware Spring Framework is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-31999 @fastify/secure-session: Reuse of destroyed secure session cookie

@festify/secure-session creates a secure stateless cookie session for Fastify. At the end of the request handling, it will encrypt all data in the session with a secret key and attach the ciphertext as a cookie value with the defined cookie name. After that, the session on the server side is...

CVE-2024-31983 XWiki Platform: Remote code execution from edit in multilingual wikis via translations

XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edited by any user who has edit right, circumventing the rights that are normally required for authoring translations script right for user-scope translations, wiki admin for translations on the wiki. Starting i...

CVE-2024-31983

CVE-2024-31983 (XWiki Platform) : In multilingual wikis, translations can be edited by any user with edit rights, bypassing usual authoring permissions. This can lead to remote code execution if the translation value is not properly escaped where it is used. Affected versions include 4.3-mileston...

CVE-2024-31981

XWiki Platform has a remote code execution vulnerability (CVE-2024-31981) via PDF export templates. Affected versions are 3.0.1 up to 4.10.19, plus 15.5.x and 15.10-rc-1 before patches, with fixes in 4.10.20, 15.5.4, and 15.10-rc-1. If PDF templates are not used, an admin can create the XWiki.PDF...

GHSA-CV55-V6RW-7R5V XWiki Platform remote code execution from account via custom skins support

Impact Any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote code execution. To reproduce, as a user without edit, script or admin right, add an object of class XWiki.XWikiSkins to your...

CVE-2024-26815

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...

residentialhydrogenpower.com Cross Site Scripting vulnerability OBB-3913362

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-21279 · Unknown · Ninja Forms

Name of the Vulnerable Software and Affected Versions: Ninja Forms versions prior to 3.8.1 Description: The issue is related to a cross-site scripting vulnerability in submit processing. If exploited, an arbitrary script may be executed on the web browser of the user accessing the website using t...

WordPress Currency per Product for WooCommerce Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Currency per Product for WooCommerce Type Plugin Vulnerable versions = 1.6.0 Fixed in 1.7.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31920 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9bdf124686da Credit...

Multiple programming languages fail to escape arguments properly in Microsoft Windows

Overview Various programming languages lack proper validation mechanisms for commands and in some cases also fail to escape arguments correctly when invoking commands within a Microsoft Windows environment. The command injection vulnerability in these programming languages, when running on Window...

CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

CVE-2024-22025 affecting package nodejs for versions less than 16.20.2-4

CVE-2024-22025 affecting package nodejs for versions less than 16.20.2-4. A patched version of the package is available...

CVE-2024-2496 affecting package libvirt for versions less than 7.10.0-8

CVE-2024-2496 affecting package libvirt for versions less than 7.10.0-8. A patched version of the package is available...

UBUNTU-CVE-2024-22423

yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using --exec with %q by replacing double quotes with two double quotes. However, this escaping is not sufficient, and still allows expansion of environment...

CVE-2024-22423 yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows

yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using --exec with %q by replacing double quotes with two double quotes. However, this escaping is not sufficient, and still allows expansion of environment...