WordPress Duplicate Page or Post plugin <= 1.5.0 - Arbitrary Settings Update leading to Stored Cross-Site Scripting (XSS) vulnerability

Arbitrary Settings Update leading to Stored Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Duplicate Page or Post plugin versions = 1.5.0. Solution Update the WordPress Duplicate Page or Post plugin to the latest available version at least 1.5.1...

Moderate: Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

haproxy: request smuggling attack or response splitting via duplicate content-length header

Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2022:0063 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2022-22122

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: This candidate is a reservation duplicate of CVE-2021-37866. Notes: All CVE users should reference CVE-2021-37866 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-45388

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-45608. Reason: This candidate is a reservation duplicate of CVE-2021-45608. Notes: All CVE users should reference CVE-2021-45608 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

haproxy: request smuggling attack or response splitting via duplicate content-length header

Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

haproxy: request smuggling attack or response splitting via duplicate content-length header

Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while...

Huawei HarmonyOS code-related vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China Inc. A resource management error vulnerability exists in Huawei HarmonyOS, which stems from duplicate calls to freed pointers by the product's camera component. No details of the vulnerability are currently available...

Service Provider Console displays duplicate entries for machines when Veeam Agent is installed on Citrix VM.

Article Applicability This article documents an issue resolved in Veeam Service Provider Console 7. Challenge When VMs on Citrix Hypervisor formerly known as XenServer that is orchestrated by Cloudstack Apache or Azure Stack Hub and using Veeam Agent for Microsoft Windows or for Linux are managed...

CVE-2021-41610

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-27339. Reason: This candidate is a reservation duplicate of CVE-2020-27339. Notes: All CVE users should reference CVE-2020-27339 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-41610

CVE-2021-41610 is a reserved/duplicate entry, not a distinct vulnerability. The Initial Description states it should reference CVE-2020-27339 instead of this candidate. Connected documents provide the public details for CVE-2020-27339 (InsydeH2O SMM driver input validation issues with fixed kerne...

CVE-2021-45817

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11689. Reason: This candidate is a duplicate of CVE-2018-11689. Notes: All CVE users should reference CVE-2018-11689 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-45817

CVE-2021-45817 is a duplicate of CVE-2018-11689; the available connected record (CVE-2018-11689) describes a Cross-Site Scripting vulnerability in Hanwha DVR Web Viewer 2.17 and Samsung Web Viewer, exploitable via the /cgi-bin/webviewer_login_page data3 parameter. The same Web Viewer codebase was...

CVE-2021-3095

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43551. Reason: This candidate is a reservation duplicate of CVE-2021-43551. Notes: All CVE users should reference CVE-2021-43551 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-3090

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43553. Reason: This candidate is a reservation duplicate of CVE-2021-43553. Notes: All CVE users should reference CVE-2021-43553 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-3095

The CVE-2021-3095 entry is a reservation duplicate of CVE-2021-43551. The connected CVE-2021-43551 describes a cross-site scripting vulnerability in OSIsoft PI Vision: a remote attacker with write access can inject code into a display, leading to unauthorized information disclosure, modification,...

CVE-2021-3090

CVE-2021-3090 is rejected/not used; this candidate is a reservation duplicate of CVE-2021-43553.

Cross-Site Request Forgery (CSRF) in zikula-modules/content

Description There is no csrf protection for content page duplicate functionality. Proof of Concept document.forms0.submit; Impact This vulnerability is capable of creating more number of duplicates by clicking malicious links...