CBL Mariner 2.0 Security Update: libdb (CVE-2017-3616)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3616 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3612)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3612 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3615)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3615 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

SUSE-SU-2024:2274-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2024-4032: Rearranging definition of private v global IP. bsc1226448 - CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. bsc1226447...

CVE-2024-5938

The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-5938

The CVE-2024-5938 entry concerns Boot Store (WordPress theme). It is vulnerable to Stored XSS via the link parameter of the theme’s Button shortcode in all versions up to and including 1.6.4, due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-le...

WordPress Boot Store theme <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Button Shortcode vulnerability discovered by Francesco Carlucci in WordPress Theme Boot Store versions = 1.6.4...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3617)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3617 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3605)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3605 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: libdb (CVE-2019-2708)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-2708 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prio...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3611)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3611 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

WordPress Plugin Boot Store Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-5938: Improper Neutralization of Input During Web Page Generation

The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

PT-2024-26016 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: GalaxyStore versions prior to 4.5.81.0 Description: The issue is related to improper verification of intent by a broadcast receiver in GalaxyStore, allowing local attackers to launch unexported activities of GalaxyStore. Recommendations: For...

PT-2024-37253 · WordPress · Boot Store

Name of the Vulnerable Software and Affected Versions: The Boot Store theme for WordPress versions up to, and including, 1.6.4 Description: The issue is related to Stored Cross-Site Scripting via the link parameter within the theme's Button shortcode due to insufficient input sanitization and...

WordPress Boot Store Theme <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Boot Store Type Theme Vulnerable versions = 1.6.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5938 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 849a6c7d4031 Credits Francesco Carlucci Required...

PT-2024-31336

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue occurs when a task waiting for completion of a Store Data operation is interrupted, and an attempt to halt this operation fails due to a hardware or firmware problem. This can lead to...

btctax-store (>=0.1.0, <=0.18.0), pep_engine_sequoia_backend (1.1.0) +7 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0, <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.1.0, =0.25.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0-rc.1, =4.1.1 Source cves: CVE-2024-58261 Source advisory: GHSA-9344-P847-QM5C...

CVE-2024-28973

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted...

PT-2024-40911

Name of the Vulnerable Software and Affected Versions sequoia-openpgp versions 1.13.0 through 1.20.0 Description The issue is a denial-of-service vulnerability that causes the process to enter an infinite loop when triggered. It affects software directly or indirectly using the interface sequoia...