WordPress Classic Editor and Classic Widgets Plugin <= 1.4.1 is vulnerable to SQL Injection

Software Classic Editor and Classic Widgets Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-47312 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID bea053e6b42c Credits Hakiduck Required privilege...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-2462)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: jupyterlab-4.2.5-1.fc40

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

MAL-2024-8915 Malicious code in bamoe-standalone-bpmn-and-dmn-editors-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f4337208b3b0a1e286af8a7334f3d815345a95eb2dadeb5c4b58fdd4b43a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Adobe Reader Classic 2020 Security Update (APSB24-70) - Mac OS X

Adobe Acrobat Reader Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader Classic 2020 Security Update (APSB24-70) - Windows

Adobe Acrobat Reader Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-6137

BT: Classic: SDP OOB access in getattsearchlist...

CVE-2024-6135

BT:Classic: Multiple missing buf length checks...

CVE-2024-6137

CVE-2024-6137 affects Zephyr RTOS Bluetooth SDP handling, specifically a vulnerability in the function get_att_search_list that can cause an out-of-bounds write. The root cause, per sources, is improper handling of data sizes in get_att_search_list (bluetooth/host/sdp.c), leading to a crash and p...

CVE-2024-6137 BT: Classic: SDP OOB access in get_att_search_list

BT: Classic: SDP OOB access in getattsearchlist...

CVE-2024-6137 BT: Classic: SDP OOB access in get_att_search_list

BT: Classic: SDP OOB access in getattsearchlist...

CVE-2024-6135

CVE-2024-6135 relates to Zephyr RTOS (BT Classic) where the protocol handling lacks several buffer length checks, enabling a heap-based buffer overflow. Connected sources describe inadequate validation of buffer lengths in BLE/connection update flows and multiple missing length checks in the BT C...

CVE-2024-6135 BT:Classic: Multiple missing buf length checks

BT:Classic: Multiple missing buf length checks...

PT-2024-37412

Name of the Vulnerable Software and Affected Versions: BT: Classic affected versions not specified Description: The issue concerns an SDP OOB access vulnerability in the get att search list function of BT Classic. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-37410 · Unknown · Bt Classic

Name of the Vulnerable Software and Affected Versions: BT:Classic affected versions not specified Description: The issue concerns multiple missing buffer length checks. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-worl...

Siemens Third-Party Component in SICAM and SITIPE Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-7419 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions 9.1.6, 9.2.3, and 9.3.0 Description: A low-privileged user without the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic...

CVE-2024-33054 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine...

ASB-A-344620519

Bulletin has no description...

CVE-2024-43953

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Classic Addons Classic Addons – WPBakery Page Builder allows Stored XSS.This issue affects Classic Addons – WPBakery Page Builder: from n/a through 3.0...