403 matches found
CVE-2024-27294 dp-golang Go installation could be owned by wrong user
dp-golang is a Puppet module for Go installations. Prior to 1.2.7, dp-golang could install files — including the compiler binary — with the wrong ownership when Puppet was run as root and the installed package was On macOS: Go version 1.4.3 through 1.21rc3, inclusive,...
Puppet Security Vulnerabilities
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, and so on. A security vulnerability exists in Puppet versions prior to...
PT-2024-21801 · Puppet +1 · Puppet +1
Name of the Vulnerable Software and Affected Versions: dp-golang versions prior to 1.2.7 Description: The issue arises when dp-golang is used to install Go, potentially leading to files being installed with incorrect ownership. This occurs when Puppet is run as root and the installed package is o...
dp-it.net Improper Access Control vulnerability OBB-3858025
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-21727
XSS vulnerability in DP Calendar component for Joomla...
Cross site scripting
XSS vulnerability in DP Calendar component for Joomla...
CVE-2024-21727 Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14
XSS vulnerability in DP Calendar component for Joomla...
CVE-2024-21727 Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14
XSS vulnerability in DP Calendar component for Joomla...
CVE-2024-21727
CVE-2024-21727 affects the DP Calendar component for Joomla. The CVEList entry notes an XSS vulnerability in DP Calendar (affected versions 8.0.0–8.0.14). From the CVSS data, the impact is Confidentiality/Integrity Low, Availability None, with a Network attack vector, Low attack complexity, and u...
PT-2024-19021 · Joomla · Dp Calendar
Name of the Vulnerable Software and Affected Versions: DP Calendar component for Joomla affected versions not specified Description: The issue is related to a XSS vulnerability in the DP Calendar component for Joomla. There is no information provided about the estimated number of potentially...
dp-pumps.com Improper Access Control vulnerability OBB-3797606
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dp-groups.com Improper Access Control vulnerability OBB-3797602
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
Spoofing
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
CVE-2023-41294
Summary: CVE-2023-41294 is a vulnerability in the Huawei HarmonyOS DP module described as a service hijacking flaw that can impact some Super Device services. The initial CVE notes a network-accessible issue with a critical (CVSS 9.8) impact profile (C, I, A HIGH) and no user interaction required...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
PT-2023-3372 · Siemens · Simotion D435-2 Dp +6
Name of the Vulnerable Software and Affected Versions: SIMOTION C240 versions 5.4 through 5.5 SP1 SIMOTION C240 PN versions 5.4 through 5.5 SP1 SIMOTION D410-2 DP versions 5.4 through 5.5 SP1 SIMOTION D410-2 DP/PN versions 5.4 through 5.5 SP1 SIMOTION D425-2 DP versions 5.4 through 5.5 SP1 SIMOTI...
