WordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WP-NERD Toolkit versions = 1.1...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

libvirt: Multiple Vulnerabilities

Background libvirt is a C toolkit for manipulating virtual machines. Description Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

ROS-20241211-01

The vulnerability of the OpenSC smart card software toolkit and libraries is related to the fact that, that in pkcs15init buffers are partially filled with data, and initialized portions of the buffer can be accessed by bypassing the restrictions. Exploitation of the vulnerability could allow an...

Security Bulletin: A vulnerability in XML toolkit for Ruby affects IBM License Metric Tool.

Summary There is a vulnerability in the XML toolkit for Ruby component used by IBM License Metric Tool. Vulnerability Details CVEID:CVE-2024-49761 DESCRIPTION: Ruby REXML is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By sending a specially...

Important: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.5 security and bug fix update

The Migration Toolkit for Containers MTC 1.8.5 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

GLSA-202412-11 : OATH Toolkit: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202412-11 OATH Toolkit: Privilege Escalation A vulnerability has been discovered in OATH Toolkit. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from t...

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host.

...

OATH Toolkit: Privilege Escalation

Background OATH Toolkit provide components to build one-time password authentication systems. It contains shared C libraries, command line tools and a PAM module. Supported technologies include the event-based HOTP algorithm RFC 4226, the time-based TOTP algorithm RFC 6238, and Portable Symmetric...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

The vulnerability of the Intel Assistive Context-Aware Toolkit (ACAT) for people with disabilities in Windows operating systems arises from an uncontrolled element in the search process, allowing attackers to exploit their privileges.

The vulnerability of the Intel Assistive Context-Aware Toolkit ACAT for people with disabilities on Windows operating systems is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Intel Rendering Toolkit’s software development tools is related to an uncontrolled search path element, which allows a hacker to enhance their privileges.

The vulnerability of the Intel Rendering Toolkit software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Astra Linux – Vulnerability in libpod

BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. Two malicious build steps running in parallel, which share the same cache mounts for subpaths, could cause a race condition that allows files from the host system to be...

Astra Linux – Vulnerability in dcmtk

In DCMTK, versions prior to 3.6.9 have a segmentation fault due to an invalid DIMSE message...

Astra Linux – Vulnerability in dcmtk

In DCMTK, versions prior to 3.6.9 have a segmentation fault due to an invalid DIMSE message...

Astra Linux – Vulnerability in dcmtk

The Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component...

Astra Linux – Vulnerability in oath-toolkit

pamoath.so in oath-toolkit 2.6.7 through 2.6.11—before 2.6.12—allows root privilege escalation. This is because, in the context of PAM code running as root, it improperly handles user file access, such as by calling fchown when a symlink exists...