PT-2024-26340 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure...

Malicious code in eslint-disable-line (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4badfe1d87068f4cc3cb6bd441258d5caebd50c951f1e4c1ec43729eb79a08d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2325 Malicious code in eslint-disable-line (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4badfe1d87068f4cc3cb6bd441258d5caebd50c951f1e4c1ec43729eb79a08d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-27935

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8 Description The Linux kernel has a vulnerability that can cause rare kernel crashes due to bad page status error messages. This issue is caused by a race condition between thread A allocating an extent buffer...

CVE-2024-36497

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely...

CVE-2024-36497 Unhashed Storage of Password

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely...

PT-2024-4296

Name of the Vulnerable Software and Affected Versions Emacs versions prior to 29.4 Org Mode versions prior to 9.7.5 Description The issue arises from the expansion of a %... link abbrev by the org-link-expand-abbrev function in lisp/ol.el, even when it specifies an unsafe function like...

SUSE CVE-2024-38557

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB device along with all of its representors are destroyed, and then the slaves' representors get reloaded. In case the slave IB representor...

PT-2024-37484 · Unknown · Zorlan Skycaiji

Name of the Vulnerable Software and Affected Versions: Zorlan SkyCaiji versions up to 2.8 Description: A vulnerability has been found in the Task Handler component of Zorlan SkyCaiji, allowing for cross-site scripting XSS attacks. The manipulation of the onerror argument leads to this issue. The...

CVE-2024-36270

CVE-2024-36270 : Linux kernel netfilter/tproxy vulnerability fixed. The bug caused a general protection fault / NULL pointer dereference in nf_tproxy_laddr4 when ip address handling hit a NULL device on the in_dev_rcu path. The corrigendum notes __in_dev_get_rcu() can return NULL and requires a N...

WordPress Widget Bundle plugin <= 2.0.0 - Widget Disable/Enable via CSRF vulnerability

Widget Disable/Enable via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Widget Bundle versions = 2.0.0...

SUSE CVE-2022-48734

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a transaction before waiting for the qgroup rescan worker completes. However, this wait can be infinite and results in deadlock because...

PT-2024-26278 · Unknown · Rsi Pdf/Html Catalog Evolution

Name of the Vulnerable Software and Affected Versions: RSI PDF/HTML catalog evolution prestapdf versions = 7.0.0 Description: A SQL injection issue exists, allowing a guest to perform SQL injection via the PrestaPDFProductListModuleFrontController::queryDb function. Recommendations: For versions ...

PT-2024-26786 · WordPress · Ubermenu

Name of the Vulnerable Software and Affected Versions: UberMenu plugin for WordPress versions up to, and including, 3.8.3 Description: The issue is due to missing or incorrect nonce validation on the ubermenu delete all item settings and ubermenu reset settings functions. This allows...

PT-2024-12815 · Joplin · Joplin

Name of the Vulnerable Software and Affected Versions: Joplin versions prior to 2.12.8 Description: A Cross site scripting XSS vulnerability in Joplin allows clicking on an untrusted image link to execute arbitrary shell commands. The HTML sanitizer preserves links, but unlike links, the target a...

CVE-2024-38557

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB device along with all of its representors are destroyed, and then the slaves' representors get reloaded. In case the slave IB representor...

CVE-2022-48734

A vulnerability was found in the Linux kernel's btrfs file system. The quota disable process leads to a deadlock situation when the quota disable ioctl is initiated. This issue starts a transaction and waits indefinitely for the qgroup rescan worker to complete, creating a circular dependency wit...

DEBIAN-CVE-2022-48734

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a transaction before waiting for the qgroup rescan worker completes. However, this wait can be infinite and results in deadlock because...

CVE-2022-48734

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a transaction before waiting for the qgroup rescan worker completes. However, this wait can be infinite and results in deadlock because...

UBUNTU-CVE-2022-48734

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a transaction before waiting for the qgroup rescan worker completes. However, this wait can be infinite and results in deadlock because...