MAL-2024-11444 Malicious code in sdk-sanity-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sdk-sanity-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

WordPress Plugin Button Generator has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-13685

Name of the Vulnerable Software and Affected Versions Button Generator – easily Button Builder versions n/a through 2.3.8 Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For...

CVE-2023-49154: Missing Authorization

Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...

CVE-2024-11457

The CVE-2024-11457 vulnerability affects the WordPress plugin Feedpress Generator – External RSS Frontend Customizer (

CVE-2024-11457 Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting

The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

PT-2024-17008 · WordPress · Feedpress Generator – External Rss Frontend Customizer

Name of the Vulnerable Software and Affected Versions: Feedpress Generator – External RSS Frontend Customizer plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Reflected Cross-Site Scripting via the tab parameter due to insufficient input sanitization...

WordPress plugin Feedpress Generator has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

CVE-2024-11457: Improper Neutralization of Input During Web Page Generation

The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

Vulnerabilities fixed in SonicWall SMA100 SSLVPN

SonicWall has fixed vulnerabilities in the SMA100 SSLVPN Specifically for firmware versions 10.2.1.13-72sv and earlier. The vulnerabilities in the SonicWall SMA100 SSLVPN include a heap-based buffer overflow, a stack-based buffer overflow, and a problem with the certificate requirement during...

dev.sigstore:sigstore-maven-plugin (>=1.0.0, <=1.1.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-54140 via dev.sigstore:sigstore-java (>=1.0.0, <=1.1.0)

dev.sigstore:sigstore-java MAVEN version =1.0.0, =1.0.0, =2.0.2, =2.0.3, =2.0.4 Source cves: CVE-2024-54140 Source advisory: OSV:GHSA-JP26-88MW-89QR...

dev.sigstore:sigstore-maven-plugin (>=1.0.0, <=1.1.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-54140 via dev.sigstore:sigstore-java (>=1.0.0, <=1.1.0)

dev.sigstore:sigstore-java MAVEN version =1.0.0, =1.0.0, =2.0.2, =2.0.3, =2.0.4 Source cves: CVE-2024-54140 Source advisory: GHSA-JP26-88MW-89QR...

CVE-2024-53702

Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...

CVE-2024-53702

Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...

CVE-2024-53702

Use of cryptographically weak pseudo-random number generator PRNG vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret...

VulnCheck KEV: CVE-2024-35219

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

SonicWALL SMA100 security vulnerability

The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL USA. The SonicWALL SMA100 suffers from a cryptographic issue vulnerability that stems from the use of a weakly encrypted pseudo-random number generator in the backup code generator. An attacker could exploit the vulnerabilit...

PT-2024-9234 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 series affected versions not specified Description: The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG in the SonicWall SMA100 SSLVPN backup code generator. This weakness can be...