org.wildfly.core:wildfly-core-dist (3.0.2.cr1), org.wildfly.core:wildfly-core-feature-pack (3.0.2.cr1) +18 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (3.0.2.cr1)

org.wildfly.core:wildfly-server MAVEN version 3.0.2.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.2.cr1 - org.wildfly.core:wildfly-core-feature-pack...

CVE-2025-22994

creationtimestamp| type| source ---|---|--- 2025-01-31 16:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fimmohi2r 2025-01-31 19:34:23+00:00| seen| https://t.me/cvedetector/16965 2025-01-31 19:35:24+00:00| seen|...

WordPress plugin Shared Files: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-13504: Improper Neutralization of Input During Web Page Generation

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress Shared Files plugin <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload vulnerability

Limited Unauthenticated Stored Cross-Site Scripting via File Upload vulnerability discovered by Tim Coen in WordPress Plugin Shared Files versions = 1.7.42...

The Basics of AWS Infrastructure Security

Discover key strategies to strengthen your AWS security posture, from applying protection at all layers to understanding shared responsibility in the cloud...

Firebird Population Cancer Registry Disclosure

The vulnerability of the Firebird software components “Population Cancer Registry” and “Hospital Cancer Registry” is related to the shared storage of passwords with decryption tools. Exploiting this vulnerability can allow an attacker to disclose the protected information...

LoongArch: Don't crash in stack_top() for tasks without vDSO

...

Linux kernel DoS

The vulnerability in the mm/madvise.c and mm/msync.c components of the Linux kernel involves the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux GPU DRM VMWGFX DoS

The vulnerability of the drivers/gpu/drm/vmwgfx cores in the Linux operating system is related to the simultaneous execution using shared resources with improper synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux HFSplus File Truncate Buffer Overflow DoS

The vulnerability of the hfsplusfiletruncate function in the fs/hfsplus/extents.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 41 Update: glibc-2.40-21.fc41

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

CVE-2024-26317

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

CVE-2024-26317

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

CVE-2024-26317

A cryptographic vulnerability exists in illumos illumos-gate 2024-02-15 due to an error in the elliptic curve point addition algorithm when using mixed Jacobian-affine coordinates. This flaw causes the algorithm to incorrectly yield a result of POINT_AT_INFINITY , which a man-in-the-middle attack...

PT-2025-2394 · Illumos · Illumos

Name of the Vulnerable Software and Affected Versions: illumos illumos-gate affected versions not specified Description: An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT AT INFINITY when it...

illumos-gate security vulnerabilities

illumos-gate is an open source Unix operating system from illumos open source. A security vulnerability exists in illumos-gate, which stems from an error in the elliptic curve point addition algorithm using mixed Jacobi affine coordinates, causing an attacked party to compute the wrong shared key...

CVE-2024-26317: Use of a Broken or Risky Cryptographic Algorithm

In illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection...

PT-2025-1744 · Ecovacs · Ecovacs Vacuums +1

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawn mowers and vacuums affected versions not specified Description: The issue concerns the use of a shared, static secret key to encrypt BLE GATT messages in ECOVACS robots. This allows an unauthenticated attacker within BLE...

ECOVACS robot lawnmowers and vacuums have security vulnerabilities

ECOVACS robot vacuums and ECOVACS robot lawnmowers are both products of the Chinese company ECOVACS.ECOVACS robot vacuums are a line of vacuum cleaners.ECOVACS robot lawnmowers are a line of lawnmowers. A security vulnerability exists in the ECOVACS robot lawnmowers and vacuums that stems from th...