CVE-2024-49625 WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components

Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...

WordPress plugin SiteBuilder Dynamic Components 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPres...

[SECURITY] Fedora 40 Update: rust-tower0.4-0.4.13-1.fc40

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 40 Update: rust-tower-0.5.1-1.fc40

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower0.4-0.4.13-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

[SECURITY] Fedora 39 Update: rust-tower-0.5.1-1.fc39

Tower is a library of modular and reusable components for building robust clients and servers...

WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin SiteBuilder Dynamic Components versions = 1.0...

Security Bulletin: Due to use of International Components for Unicode, IBM Rational ClearQuest is vulnerable to buffer overflow.

Summary Multiple vulnerabilities in International Components for Unicode used within IBM Rational ClearQuest have been addressed CVE-2020-10531, CVE-2011-4599, CVE-2014-8146 Vulnerability Details CVEID:CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C++ is vulnerable to...

WordPress SiteBuilder Dynamic Components Plugin <= 1.0 is vulnerable to PHP Object Injection

Software SiteBuilder Dynamic Components Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49625 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 7e4e11ce38e6 Credits Mika Required privilege...

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

MAL-2024-9741 Malicious code in openstad-components-nlmap (npm)

--- -= Per source details. Do not edit below this line.=-...

Directory Traversal

Gradio is vulnerable to a Directory Traversal. The vulnerability is due to improper data validation in several Gradio components, allowing attackers to bypass input constraints and leak arbitrary files through the post-processing step. This could expose sensitive files to unauthorized users,...

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

[SECURITY] Fedora 41 Update: rust-tower-0.5.1-1.fc41

Tower is a library of modular and reusable components for building robust clients and servers...

Oracle Critical Patch Update Advisory - October 2024

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

TECNO com.transsion.aivoiceassistant 安全漏洞

TECNO com.transsion.aivoiceassistant is a mobile application from TECNO China. A security vulnerability exists in TECNO com.transsion.aivoiceassistant that stems from the presence of improperly controlled permissions, which can lead to the launch of any unexported component...

PT-2024-15978 · Transsion · Com.Transsion.Aivoiceassistant

Name of the Vulnerable Software and Affected Versions: com.transsion.aivoiceassistant affected versions not specified Description: The issue is related to improper permission control in the mobile application, which can lead to the launch of any unexported component. Recommendations: At the momen...

dotnet: Multiple .NET components susceptible to hash flooding

A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...

SUSE CVE-2024-47868

Gradio is an open-source Python package designed for quick prototyping. This is a data validation vulnerability affecting several Gradio components, which allows arbitrary file leaks through the post-processing step. Attackers can exploit these components by crafting requests that bypass expected...