GSD-2023-1001865 mm: multi-gen LRU: fix crash during cgroup migration

mm: multi-gen LRU: fix crash during cgroup migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

USN-5866-1 nova vulnerabilities

It was discovered that Nova did not properly manage data logged into the log file. An attacker with read access to the service's logs could exploit this issue and may obtain sensitive information. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. CVE-2015-9543 It was discovered that...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Nova vulnerabilities (USN-5866-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5866-1 advisory. It was discovered that Nova did not properly manage data logged into the log file. An attacker with read access to the service's...

PT-2023-34941 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A potential security issue exists due to a crash during cgroup migration in the multi-gen LRU. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.7 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.7 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2022-2546 All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wmexport AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response...

CVE-2022-2546 All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wmexport AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response...

CVE-2022-2546

The CVE-2022-2546 issue affects WordPress All-in-One WP Migration plugin &lt; 7.63. The vulnerability arises from using the wrong content type and not properly escaping the ai1wm_export response, enabling an attacker to craft a request that, when submitted by a visitor, injects arbitrary HTML/Jav...

CVE-2022-2546: Undefined Security Weakness

The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wmexport AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response...

PT-2023-12789

Name of the Vulnerable Software and Affected Versions All-in-One WP Migration WordPress plugin versions prior to 7.63 Description The issue allows an attacker to craft a request that, when submitted by any visitor, will inject arbitrary HTML or JavaScript into the response, which will be executed...

WordPress Plugin All-in-One WP Migration Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

campaign.rainbowmigration.org.uk Cross Site Scripting vulnerability OBB-3173737

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cyber Security Managed Services 101

MSP partnerships are growing in line with rapid cloud migration and the evolving threat landscape. Discover how an MSP can help your business and tips for making an informed partner decision...

NSC: NetScaler (Citrix ADC) MPX/SDX 15000-50G/15000Z-50G

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler Citrix ADC MPX/SDX 15020-50G/15020Z-50G, MPX/SDX 15030-50G/15030Z-50G, MPX/SDX 15040-50G/15040Z-50G, MPX/SDX 15060-50G/15060Z-50G, MPX/SDX 15080-50G/15080Z-50G, MPX/SDX 15100-50G/15100Z-50G, MPX/SDX 15120-50G/15120Z-50G Th...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24434 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24434 Source...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24434 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24434 Source...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24436 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24436 Source...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24436 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24436 Source...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24435 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24435 Source...

org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (2.2.0) potentially affected by CVE-2023-24435 via org.jenkins-ci.plugins:ghprb (1.31.4)

org.jenkins-ci.plugins:ghprb MAVEN version 1.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ghprb and may be impacted: - org.jenkins-ci.plugins:salesforce-migration-assistant-plugin 2.2.0 Source cves: CVE-2023-24435 Source...