kernel bug fix update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

(RHSA-2024:4223) Important: Red Hat Certificate System security and bug fix update

Red Hat Certificate System is a complete implementation of an enterprise software system designed to manage enterprise public key infrastructure PKI deployments. Bug fixes: Coolkey Hardcoded RSA Max Key Size BZ2047831 Add Secure Channel Support for AES-256 Keys BZ2121463 TPS missing Host header...

CVE-2023-41927

Kiloview P1/P2 devices are affected by CVE-2023-41927 due to supporting at least one cipher suite on NCSC-NL’s list of soon-to-be-obsolete suites, enabling potential cryptographic weaknesses. The issue is documented across multiple sources (NTSC advisory, Red Hat/NVD references, and PT Security l...

[SECURITY] Fedora 40 Update: python-urllib3-1.26.19-1.fc40

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

Google Golang Security Vulnerability

Google Golang is a static strongly typed, compiled language from Google.Go's syntax is close to that of C, but differs with respect to variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages that...

Customer Support System 1.0 - Stored XSS Vulnerability

Exploit Title: Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

The vulnerability of Firefox ESR and the Thunderbird email client, related to improper cleaning or release of resources, allows attackers to compromise the confidentiality, accessibility, and integrity of protected information.

The vulnerability of Firefox ESR and the Thunderbird email client is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, accessibility, and integrity of protected information...

GHSA-328P-362G-R48J ag-grid packages vulnerable to Prototype Pollution

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Security Bulletin: Denial of service caused by jose4j in IBM WebSphere Application Server Liberty may affect IBM Storage Protect Operations Center

Summary IBM Storage Protect Operations Center may be affected by denial of service caused by jose4j in IBM WebSphere Application Server Liberty. CVE-2023-51775. Vulnerability Details CVEID:CVE-2023-51775 DESCRIPTION: jose4j is vulnerable to a denial of service, caused by improper input validation...

Security Bulletin: Denial of service vulnerability in Amazon Ion may affect IBM Storage Protect Server

Summary IBM Storage Protect Server may be affected by denial of service caused by stack-based overflow in Amazon Ion. CVE-2024-21634. Vulnerability Details CVEID:CVE-2024-21634 DESCRIPTION: Amazon Ion is vulnerable to a denial of service, caused by a stack-based overflow in ion-java for...

Customer Support System 1.0 Cross Site Scripting

Exploit Title: Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Date: 28/11/2023 Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

PT-2024-28317 · Unknown · Ag-Grid-Enterprise

Name of the Vulnerable Software and Affected Versions: ag-grid-enterprise version 31.3.2 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution in the ModuleSupport.jsonApply component...

NSC: NetScaler (Citrix ADC) MPX/SDX 26000Z-50S, MPX 15000Z-50G FIPS

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler Citrix ADC MPX/SDX 26000Z-50S, MPX 15000Z-50G FIPS The tables below explain the NetScaler Citrix ADC life cycle management milestones as well as important information regarding dates and options during this period. The dat...

PHPOK Security Vulnerability

PHPOK is an enterprise website builder system that supports extensions. A security vulnerability exists in PHPOK version 6.4.003, which originates from the presence of a cross-site scripting XSS vulnerability...

Customer Support System 1.0 - Stored XSS

Exploit Title: Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Date: 28/11/2023 Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

Security Bulletin: IBM InfoSphere Information Server is vulnerable due to information exposure in a URL (CVE-2023-50954)

Summary An information exposure vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50954 DESCRIPTION: IBM InfoSphere Information Server returns sensitive information in URL information that could be used in further attacks against the system. CVSS...

PT-2024-26342 · Ibm · Ibm Mq Console

Name of the Vulnerable Software and Affected Versions: IBM MQ Console versions 9.3 LTS and 9.3 CD Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...

PT-2024-33813

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from dml2 core shared mode support and dml core mode support accessing the third element of dummy boolean, which has a size of 2. This results in an OVERRUN when...

WordPress WebP & SVG Support plugin <= 1.4.0 - Author+ Stored XSS via SVG vulnerability

Author+ Stored XSS via SVG vulnerability discovered by Bob Matyas, Rayhan Ramdhany Hanaputra in WordPress Plugin WebP & SVG Support versions = 1.4.0...

CVE-2024-3633

The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...