WordPress plugin WHMCS Bridge 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress WHMCS Bridge plugin prior to 6.4b, which ste...

PT-2022-9667

Name of the Vulnerable Software and Affected Versions WHMCS Bridge WordPress plugin versions prior to 6.4b Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the error parameter is not properly sanitized and escaped before being outputted back in the admin...

CVE-2021-25112: Improper Neutralization of Input During Web Page Generation

The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting...

GSD-2022-1000634 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

PT-2022-28908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.16.4 Description A memory leak issue exists in the allowed ingress function related to VLAN handling in the network bridge component. The actual impact and potential for attack have not been fully...

Security Bulletin: IBM MQ Blockchain bridge dependencies are vulnerable to an issue in Apache Log4j (CVE-2021-44228)

Summary A Remote Code Execution issue was identified within the Log4j library that is used by Fabric Gateway to provide logging functionality. Fabric Gateway is used by the IBM MQ blockchain bridge component of IBM MQ 9.1.4 and later to provide connection capability between IBM MQ queue managers...

GSD-2022-1000267 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000203 net: bridge: vlan: fix memory leak in __allowed_ingress

net: bridge: vlan: fix memory leak in allowedingress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit...

PT-2022-28545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.18 Description A memory leak issue exists in the allowed ingress function related to VLAN handling in the network bridge component. The actual impact and potential for attack have not been fully...

PT-2022-28481

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description A memory leak issue exists in the allowed ingress function related to VLAN handling in the network bridge component. The actual impact and potential for attack have not been fully determined...

PT-2025-8150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A fix has been applied to address an overflow issue in the Linux kernel related to the drm/bridge component, specifically affecting the anx7625 module. The issue arises when reading EDID...

[SECURITY] Fedora 34 Update: php-laminas-form-2.17.1-1.fc34

The Laminas\Form is intended primarily as a bridge between your domain models and the View Layer. It composes a thin layer of objects representing form elements, an InputFilter, and a small number of methods for binding data to and from the form and attached objects. Documentation:...

Rockwell Automation ControlLogix Exposure of Sensitive Information to an Unauthorized Actor (CVE-2009-0474)

The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain internal web page information and internal information about the module via unspecified vectors. NOTE: this may overlap CVE-2002-1603. This plugin only works with...

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Wormhole Crypto Platform: ‘Funds Are Safe’ After $314M Heist

Wormhole – a web-based blockchain “bridge” that enables users to convert cryptocurrencies – said on Thursday that “all funds are safe” after attackers abused a vulnerability to shake it down for 120,000 Ethereum approximately $314 million. In a postmortem shared with Threatpost on Thursday,...

$320 milllion stolen from Wormhole crypto-trading platform

By using an exploit in the software of crypto-trading platform Wormhole, threat actors have stolen an estimated $322 million in cryptocurrencies. The platform is offering a $10 million award for the stolen money and details about the attack. How they pulled it off Wormhole Portal is a web-based...

nmstate bug fix and enhancement update

Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner. Bug Fixes and Enhancements: nmstate changes names of existing ovs-bridge ports when attaching a veth BZ2034139 libnmstate expects VF to be named differently to its actual nam...

ALBA-2022:0360 nmstate bug fix and enhancement update

Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner. Bug Fixes and Enhancements: nmstate changes names of existing ovs-bridge ports when attaching a veth BZ2034139 libnmstate expects VF to be named differently to its actual nam...

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for Unix

Summary There are multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for Unix. IBM Spectrum Protect Snapshot for Unix has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL coul...