SUSE-SU-2024:4326-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal bsc1234413 Other fixes: - Updated to Mozilla Thunderbird 128.5.2i bsc1234413: fixed: Large virtual folders could be very slow fixed:...

CGA-89H5-QQ6W-3VCR

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.0 security update

An update is now available for Red Hat Ceph Storage 8.0. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...

kernel security update

4.18.0-553.32.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-503.16.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP5) (SUSE-SU-2024:4243-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4243-1 advisory. This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic...

RHEL 9 : Red Hat Ceph Storage 8.0 (RHSA-2024:10956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10956 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

Description of the security update for SharePoint Enterprise Server 2016: December 10, 2024 (KB5002659)

None None...

DSA-5824-1 chromium - security update

Bulletin has no description...

Cisco Nexus Uncontrolled Resource Consumption (CVE-2020-3168)

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2024-53734

Cross-Site Request Forgery CSRF vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through = 1.2...

CVE-2024-53734 WordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through = 1.2...

CVE-2024-53734

The CVE-2024-53734 entry concerns a CSRF-to-Stored XSS vulnerability in the WordPress plugin Idealien Category Enhancements (versions

PT-2024-35843 · Unknown · Idealien Category Enhancements

Name of the Vulnerable Software and Affected Versions: Idealien Category Enhancements versions 1.2 and below Description: A Cross-Site Request Forgery CSRF issue exists in Idealien Category Enhancements, allowing Stored XSS. Recommendations: For Idealien Category Enhancements versions 1.2 and...

CVE-2024-53734: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through = 1.2...

WordPress plugin Idealien Category Enhancements 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Important: Red Hat Security Advisory: Red Hat Data Grid 8.5.2 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

WordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Idealien Category Enhancements versions = 1.2...

WordPress Idealien Category Enhancements Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Idealien Category Enhancements Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-53734 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2f6659c8a44b Credits SOPROBRO Required...