addr-detector (0.1.0), deeppavlov (>=0.0.5.1, <=0.0.5.3) +6 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.0)

scikit-learn PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - addr-detector 0.1.0 - deeppavlov =0.0.5.1, =0.1.2, =1.0.1, =1.0.2 Source cves: CVE-2024-5206 Source advisory: OSV:GHSA-JW8X-6495-233V...

dostoevsky (>=0.1.0, <=0.1.2), factor-analyzer (0.3.0) +3 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.1)

scikit-learn PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - dostoevsky =0.1.0, =0.3.2, =0.3.2, =0.3.3 Source cves: CVE-2024-5206 Source advisory: OSV:GHSA-JW8X-6495-233V...

dostoevsky (>=0.1.0, <=0.1.2), factor-analyzer (0.3.0) +3 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.1)

scikit-learn PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - dostoevsky =0.1.0, =0.3.2, =0.3.2, =0.3.3 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...

Advance Auto Parts customer data posted for sale

A cybercriminal using the handle Sp1d3r is offering to sell 3 TB of data taken from Advance Auto Parts, Inc. Advance Auto Parts is a US automotive aftermarket parts provider that serves both professional installers and do it yourself customers. Allegedly the customer data includes: Names Email...

GHSA-3P4X-GRPM-XW58 Password hash exposed in CraftCMS two factor authentication plugin

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

Password hash exposed in CraftCMS two factor authentication plugin

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

Improper Authentication in CraftCMS two factor authentication plugin

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

GHSA-96QM-HWHP-2RM8 Improper Authentication in CraftCMS two factor authentication plugin

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CGA-WCH6-GG52-RPHJ

Bulletin has no description...

CVE-2024-5657

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

CVE-2024-5658

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5658 CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5658 CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5658

The CVE-2024-5658 entry affects the CraftCMS plugin “Two-Factor Authentication” (versions up to 3.3.3). The root cause is that TOTP tokens can be reused within their validity period, which is described as an improper authentication vulnerability that may allow bypassing 2FA. Practical impact is l...

CVE-2024-5658

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5658 CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5657 CraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

CVE-2024-5657

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

CVE-2024-5657 CraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

CraftCMS Security Vulnerability

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS plugin Two-Factor Authentication version 3.3.1, 3.3.2, and 3.3.3, which stems from a vulnerability that allows disclosure of a user's password hash...