GHSA-M4GQ-X24J-JPMF Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify

The following bundled files within the Mermaid NPM package contain a bundled version of DOMPurify that is vulnerable to https://github.com/cure53/DOMPurify/security/advisories/GHSA-mmhx-hmjr-r674, potentially resulting in an XSS attack. This affects the built: - dist/mermaid.min.js -...

PT-2024-33274 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions 13.x prior to 13.5.2 Umbraco versions 10.x prior to 10.8.7 Umbraco versions 8.x prior to 8.18.15 Description: The issue is related to insufficient session expiration, where the Backoffice displays the logout page with a sessi...

October 22, 2024-KB5045991 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

AZL-51563 CVE-2024-49920 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc and dc-bwvbios, are null checked previously in the same function, so Coverity warns "implies that streamenc and dc-bwvbios might be...

DEBIAN-CVE-2024-49892

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytesperelementy & bytesperelementc are initialized by getbytesperelement whic...

SUSE CVE-2023-26785

MariaDB v10.5 was discovered to contain a remote code execution RCE vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...

WordPress plugin Email Verification for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A remote code execution vulnerability exists in MariaDB version 10.5, and no detailed vulnerability details are currently available...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A code injection vulnerability exists in MariaDB version 10.5, which stems from insecure privileges in the sysexec function and can be exploited by...

Moderate: Red Hat Bug Fix Advisory: LVMS 4.14.10 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.14 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

WordPress Google Language Translator plugin <= 6.0.9 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by Ram in WordPress Plugin Google Language Translator versions 6.0.10...

CVE-2024-43905

...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system for snipe individual developers. A security vulnerability exists in Snipe-IT versions prior to 7.0.10 that stems from allowing remote code execution when an attacker knows the APPKEY...

DEBIAN-CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 18...

Microsoft OpenSSH 安全漏洞

Microsoft OpenSSH is a suite of connection tools for secure access to remote computers from Microsoft USA. A security vulnerability exists in Microsoft OpenSSH. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Windows Mobile Broadband Driver 安全漏洞

Microsoft Windows Mobile Broadband Driver is a driver from Microsoft USA that allows the Windows operating system to communicate with mobile broadband devices. A security vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker has exploited the vulnerability to cause a deni...

Microsoft Windows NT OS Kernel 安全漏洞

Microsoft Windows NT OS Kernel is the core of the Windows operating system from Microsoft Corporation USA and is responsible for managing system resources, providing hardware abstraction, and ensuring system security and stability. A security vulnerability exists in Microsoft Windows NT OS Kernel...

PT-2024-8149 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.3.x through 10.5.6.x Description: The issue is related to insufficient access control in the network operating system, which could allow a low-privileged attacker with local access to potentially...

Microsoft Windows Mobile Broadband Driver 缓冲区错误漏洞

The Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. A buffer error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit this...