447 matches found
Malicious code in @ks-radar/radar-component-collect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2914 Malicious code in @ks-radar/radar-blood-lineage-collect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2913 Malicious code in @ks-radar/radar-api-collect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @ks-radar/radar-api-collect (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-35045
Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...
CVE-2023-35045: Missing Authorization
Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...
CVE-2023-35045 WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...
CVE-2023-35045
CVE-2023-35045 concerns the WordPress Fat Rat Collect plugin (<= 2.6.7). The root cause is a Missing Authorization/Broken Access Control allowing unauthorized actions within Fat Rat Collect. The CVSS v3.1 base score is 4.3 (Medium), with impact limited to availability and none for confidential...
CVE-2023-35045 WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...
PT-2024-12494
Name of the Vulnerable Software and Affected Versions Fat Rat Collect versions through 2.6.7 Description The issue is related to a Missing Authorization vulnerability. This vulnerability affects Fat Rat Collect, allowing unauthorized access due to the lack of proper authorization mechanisms...
WordPress plugin Fat Rat Collect security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
How to Build Your Autonomous SOC Strategy
Security leaders are in a tricky position trying to discern how much new AI-driven cybersecurity tools could actually benefit a security operations center SOC. The hype about generative AI is still everywhere, but security teams have to live in reality. They face constantly incoming alerts from...
CVE-2023-52682
A vulnerability was found in the Linux kernel's Flash-Friendly File System F2FS implementation. This issue arises from a failure to wait for block writeback in the post-read case, which could lead to data corruption or inconsistencies. Mitigation Mitigation for this issue is either not available ...
CVE-2023-52682 f2fs: fix to wait on block writeback for post_read case
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for postread case If inode is compressed, but not encrypted, it missed to call f2fswaitonblockwriteback to wait for GCed page writeback in IPU write path. Thread A GC-Thread - f2fsgc -...
PT-2024-5429
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the Linux kernel's IMA Integrity Measurement Architecture component, specifically in the ima collect measurement function. This...
CVE-2024-31257: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formsite Formsite | Embed online forms to collect orders, registrations, leads, and surveys allows Stored XSS.This issue affects Formsite | Embed online forms to collect orders, registrations, lead...
PT-2024-23900
Name of the Vulnerable Software and Affected Versions Formsite | Embed online forms to collect orders, registrations, leads, and surveys versions n/a through 1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Th...
CVE-2023-6522
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...
CVE-2023-6522
CVE-2023-6522 affects Extreme XDS (ExtremePacs) with an incorrect use of privileged APIs that allows collection of data as provided by users. Affected software is Extreme XDS prior to version 3914. The vulnerability stems from improper privilege management, enabling data collection by users throu...
CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...