org.apache.ode:ode-tomee (>=1.3.7, <=1.3.8), org.apache.tomee.maven:tomee-embedded-maven-plugin (>=7.0.0, <=7.1.4) +17 more potentially affected by CVE-2024-23672 via org.apache.tomcat:tomcat-websocket (>=8.5.2, <=8.5.95)

org.apache.tomcat:tomcat-websocket MAVEN version =8.5.2, =1.3.7, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =1.0.10-m10, =1.3.33 and more Source cves: CVE-2024-23672 Source advisory: OSV:GHSA-V682-8VV8-VPWR...

CVE-2024-1293

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the embedded media custom block in all versions up to, and including, 2.4.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-1293

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the embedded media custom block in all versions up to, and including, 2.4.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Plugin Brizy Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-1293: Improper Neutralization of Input During Web Page Generation

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the embedded media custom block in all versions up to, and including, 2.4.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.11.0, <=2.11.3) +3 more potentially affected by CVE-2024-28098 via org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-28098 Source advisory: GHSA-G627-R579-RW35...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3) +4 more potentially affected by CVE-2024-27894 via org.apache.pulsar:pulsar-functions-worker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-functions-worker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-27894 Source advisory: OSV:GHSA-C2X9-VW5H-39VC...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3) +4 more potentially affected by CVE-2024-27135 via org.apache.pulsar:pulsar-functions-worker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-functions-worker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-27135 Source advisory: GHSA-XP2R-G8QQ-44HH...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3) +4 more potentially affected by CVE-2024-27317 via org.apache.pulsar:pulsar-functions-worker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-functions-worker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-27317 Source advisory: MEND:CVE-2024-27317...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.11.0, <=2.11.3) +3 more potentially affected by CVE-2024-28098 via org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-28098 Source advisory: MEND:CVE-2024-28098...

March 12, 2024—KB5035885 (Monthly Rollup)

March 12, 2024—KB5035885 Monthly Rollup Applies To Windows Server 2012 R2 ESU Note IMPORTANT If you plan to install this update on a domain controller DC, we highly recommend that you install update KB5037426 instead March 22, 2024. This out-of-band update addresses a known issue that affects the...

March 12, 2024—KB5035888 (Monthly Rollup)

March 12, 2024—KB5035888 Monthly Rollup Applies To Windows Server 2008 R2 Premium Assurance Note Reminder As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows. F...

[SECURITY] Fedora 38 Update: libell-0.63-1.fc38

The Embedded Linux Library ELL provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl for dynamic linking. While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, ...

[SECURITY] Fedora 39 Update: libell-0.63-1.fc39

The Embedded Linux Library ELL provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl for dynamic linking. While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, ...

Fedora: Security Advisory for libel (FEDORA-2024-38faa9a2a8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-fdce971b84)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: plexus-containers-2.2.0-3.fc40

The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an...

BIT-WILDFLY-2020-10718

A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader TCCL. This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is ...

CVE-2023-45592

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser due to the binary being executed with the “--no-sandbox” option and with root privileges exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bund...

CVE-2023-45594

A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, with unspecified impacts to the confidentiality, integrity, and availability of the device. This...