RESTEasy Reactive Java DoS

The vulnerability of the RESTEasy Reactive Java framework in Quarkus is related to improper permission storage. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Zoom Video Conferencing DoS

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to cause service failures...

Juniper Networks Junos OS DoS

The vulnerability of the Packet Forwarding Engine PFE mechanism in Juniper Networks’ Junos OS on ACX5448 and ACX710 series devices is related to synchronization errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SINEMA Remote Connect Client Remote Access Disclosure

The vulnerability of the SINEMA Remote Connect client web interface is related to security mechanism errors. Exploiting this vulnerability allows an attacker to remotely view and edit protected information regarding VxLAN network configurations without proper access rights...

NVIDIA GPU Display Driver Heap Buffer Overflow Privilege Escalation

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrar...

Fanuc Series 32i CNC Resource Management Error

The vulnerability of Fanuc Series 32ii CNC controller’s microprogramming software is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause maintenance failures...

SAP ABA Improper Code Generation Read Modify DoS

The vulnerability of the platform for ensuring the functioning of SAP ABA applications is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to gain read-only access to data or cause service failures...

WordPress WPForms User Registration Plugin <= 2.1.0 is vulnerable to Privilege Escalation

Software WPForms User Registration Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.1.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-52209 Patch priority Low CVSS severity Low 8 Developer Claim ownership PSID 78ca3b70599d Credits...

Web Services Dynamic Discovery WS-Discovery DoS

The vulnerability of the Web Services Dynamic Discovery WS-Discovery protocol in Windows operating systems is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Remote Desktop Licensing Service DoS

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

GLPI-Agent Input Validation Privilege Escalation

The vulnerability of the GLPI-Agent, a system agent for requests, incidents, and computer equipment inventory, exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges by configuring the server wi...

Windows iSCSI Service DoS

The vulnerability of the Windows iSCSI Service in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Layer-2 Bridge Network Driver DoS

The vulnerability of the Layer-2 Bridge network driver for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Layer-2 Bridge Network Driver DoS

The vulnerability of the Layer-2 Bridge network driver for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Netscaler High Availability issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with Netscaler High Availability HA. Overview of the Issue NetScaler High Availability HA offers seamless failover capabilities to maintain uninterrupted...

Citrix Endpoint Management: Active Directory Issues

Introduction Active Directory AD integration issues in XenMobile can range from synchronization errors to authentication failures and configuration complications. This series of articles offers troubleshooting guidance and best practices to address these challenges, ensuring smooth operation and...

WordPress Send Users Email Plugin <= 1.5.1 is vulnerable to Sensitive Data Exposure

Software Send Users Email Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-38760 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 13aaf3930e9f Credits Joshua...

WordPress MStore API Plugin <= 4.14.7 is vulnerable to Broken Authentication

Software MStore API Type Plugin Vulnerable versions = 4.14.7 Fixed in 4.15.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-6328 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID eb61c3a933bb Credits Truoc Phan...

WordPress MBE eShip Plugin <= 2.1.2 is vulnerable to Sensitive Data Exposure

Software MBE eShip Type Plugin Vulnerable versions = 2.1.2 Fixed in 2.2.1 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-38742 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID df94a639a0f7 Credits Joshua Chan...

CLSA-2024-1720547899 Update of alt-php

Resolve multiple test failures - debian/rules: re-build test certificates before dhautotest, remove silencing of failing tests - debian/control: build-depend on libnsspem to be able to read PEM certificates in build-nss - debian/patches/update-test-certs-generation.patch: update keysize and diges...