CVE-2023-5562: Improper Neutralization of Input During Web Page Generation

An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...

DEBIAN-CVE-2023-44981

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper quorum.auth.enableSasl=true, the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The...

Integer Overflow to Buffer Overflow

Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow vi DFAContentModel::countLeafNodes and DFAContentModel::buildDFA. An attacker can cause out-of-bound access by sending a specially crafted HTTP request. Remediation Upgrade xerces-c to version 3.2.4 o...

CVE-2023-5408

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

DEBIAN-CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

Code injection

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

JetBrains TeamCity < 2023.05.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible CVE-2023-42793 - In JetBrains TeamCity before...

CVE-2023-43566

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

CVE-2023-43566

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

Cross site scripting

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

CVE-2023-43566

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

CVE-2023-43566

CVE-2023-43566 affects JetBrains TeamCity prior to 2023.05.4, enabling stored XSS during nodes configuration. The vulnerability is documented across multiple sources (NVD/Red Hat/Nessus plugin), with the fix introduced in TeamCity 2023.05.4. Affected component is TeamCity server configuration han...

CVE-2023-43566

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

CVE-2023-43566: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration...

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A cross-site scripting vulnerability exists in JetBrai...

PT-2023-28854

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05.4 Description The issue allows for stored XSS during nodes configuration. Recommendations For versions prior to 2023.05.4, update to version 2023.05.4 or later to resolve the issue...

Proof-of-Concept Released for Kubernetes Vulnerabilities Exposing Windows Nodes

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Three interconnected high-severity security vulnerabilities have been identified in Kubernetes. These vulnerabilities could potentially be exploited to achieve remote code execution with elevated...

olcne security update

istio 1.17.5-1 - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt 0.58.0-3 - Ensure that selinux build tags are set for all Go builds olcne 1.7.2-3 - Mofify kubevirt image tag to use virt-operator tag instead of kubevirt-version 1.7.2-2 - Update kubevirt imag...

Both NetScaler HA nodes status NOT_UP after Primary HA-MON enabled interface down

There is one direct cable connectedbetween Primary node and Secondary node, The cable connection is not via switch. Both interfaces are HA MON enabled. Both NetScaler HA nodes status turn to NOTUP after Primary HA-MON enabled interface is down...

Fedora 38 : kubernetes (2023-a3fcc0751f)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a3fcc0751f advisory. Updates to Kubernetes for F38 and F39. Security fixes for CVE-2023-3955 and CVE-2023-3676. Related update for rawhide already in stable. Update for...