CVE-2024-49268

CVE-2024-49268 affects the WordPress plugin WordPress disconnected theme (sunburntkamel disconnected) versions up to 1.3.0. The issue is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Public documents in the connected set confirm the vul...

WordPress plugin disconnected 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress disconnected theme <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme disconnected versions = 1.3.0...

AZL-48277 CVE-2024-43886 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...

AZL-48213 CVE-2024-43886 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...

FAQ: Disconnected ICA Sessions Release Connection License

Q: What are thereasons for the disconnected ICA sessions to release their Connection License? A : Active ICA sessions might be disconnected due toanynetwork issues or a user might have intentionally disconnect the session instead of logging off. In either of the cases disconnect or log off, the...

Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. This update addresses these CVEs. Vulnerability Details CVEID:CVE-2024-29857 DESCRIPTION: The Bouncy Castle Crypto Package For Java is vulnerable to a denial of...

Users unable to reconnect to disconnected session to access their Citrix virtual desktop.

Unable to reconnect to a disconnected session with error "Unknown Client error 1110" when using CVAD 2203 CU3 and earlier. When problem occurs, it is also not possible to connect via RDP. Logon stays at stuck under the "Other User Welcome" screen...

SUSE CVE-2024-26891

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint devices connect to system via hotplug capable ports, users could request a hot reset to the device by flapping device's link through...

Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. This update addresses these CVEs. Vulnerability Details CVEID:CVE-2023-39410 DESCRIPTION: Apache Avro Java SDK could allow a remote authenticated attacker to...

Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. This update addresses these CVEs. Vulnerability Details CVEID:CVE-2023-35116 DESCRIPTION: Fasterxml jackson-databind is vulnerable to a denial of service, caused...

WEM resets user-specified default printers in disconnected sessions

Users manually select default printers in their WEM-enabled desktop sessions. If they disconnect from the desktop not log off,and an automaticWEM Agent refresh occurs post-disconnect, WEM resets the user-specified default printer for that session. Consequently, when the user reconnects to their...

CVE-2022-22447

IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...

CVE-2022-22447

IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...

Code injection

IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...

IBM Disconnected Log Collector Security Vulnerability

IBM Disconnected Log Collector is a log collector from International Business Machines IBM. IBM Disconnected Log Collector suffers from a security vulnerability that stems from susceptibility to potential security misconfigurations that could disclose unexpected information...

CVE-2022-22447

The vulnerability CVE-2022-22447 affects IBM Disconnected Log Collector versions 1.0–1.8.2. The issue is described as security misconfigurations that could disclose unintended information. Remediation provided in the PT-2023-12698 entry recommends updating to IBM Disconnected Log Collector v1.8.3...

CVE-2022-22447 IBM Disconnected Log Collector information disclosure

IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...

PT-2023-12698 · Ibm · Ibm Disconnected Log Collector

Name of the Vulnerable Software and Affected Versions: IBM Disconnected Log Collector versions 1.0 through 1.8.2 Description: The issue is related to potential security misconfigurations that could disclose unintended information. There is no information provided about the estimated number of...

Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. This update addresses these CVEs. Vulnerability Details CVEID:CVE-2022-21724 DESCRIPTION: PostgreSQL JDBC Driver PgJDBC could allow a remote authenticated attack...