244 matches found
GO-2022-0322 Uncontrolled resource consumption in github.com/prometheus/client_golang
The Prometheus clientgolang HTTP server is vulnerable to a denial of service attack when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of the promhttp.InstrumentHandler middleware except RequestsInFlight; not filter any specific...
new packages: hunspell-lb
An update is available for hunspell-lb. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
resource-agents security and bug fix update
4.1.1-61.4 - Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz1850992 4.1.1-61.2 - azure-lb: fix redirect issue Resolves: rhbz1850779 4.1.1-61.1 - gcp-vpc-move-vip: add support for multiple alias IPs - sybaseASE: run verify action during start action only - azure-events: handle...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Container Platform for Windows Containers 3.0.0 security and bug fix update
The components for Red Hat OpenShift Container Platform for Windows Containers 3.0.0 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
ALBA-2021:1082 resource-agents bug fix and enhancement update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: azure-lb: nc listener dies when attempting to write to stdou...
resource-agents bug fix and enhancement update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: azure-lb: nc listener dies when attempting to write to stdou...
Logic Vulnerabilities in Multiple LB-LINK Routers
BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. Logic vulnerabilities exist in several LB-LINK routers. Attackers can utilize the vulnerabilities to modify user passwords, wifi passwords and other information...
Command Execution Vulnerability in Multiple LB-LINK Routers
BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. A command execution vulnerability exists in multiple LB-LINK routers. An attacker can exploit this vulnerability to gain control of a web server...
Information Disclosure Vulnerability in Multiple LB-LINK Routers
BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. An information disclosure vulnerability exists in multiple LB-LINK routers. An attacker can exploit the vulnerabilities to obtain sensitive information...
resource-agents security update
4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...
Low: Red Hat Security Advisory: resource-agents security and bug fix update
An update for resource-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
lb.1x2nwh.com Cross Site Scripting vulnerability OBB-1408769
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lb-toiture.be Cross Site Scripting vulnerability OBB-1392363
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lb-spring.com Cross Site Scripting vulnerability OBB-1376831
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lb-contract.it Cross Site Scripting vulnerability OBB-1341030
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lb-contract.it Cross Site Scripting vulnerability OBB-1319671
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress: code.wordpress.net subdomain Takeover
Hy Wordpress sec i found as it is posible to takeover this domain http://code.wordpress.net when you navigate it you will get this error msg: Warning! Domain mapping upgrade for this domain not found. Please log in and go to the Domains Upgrades page of your blog to use this domain. $ host...
WordPress LB Tube Video Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities
No description provided by source...
WordPress Plugin LB Mixed Slideshow - upload.php Arbitrary File Upload
WordPress Plugin LB Mixed Slideshow - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54057/info LB Mixed Slideshow plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately...