59804 matches found
AZL-53438 CVE-2024-30896 affecting package influxdb 2.7.5-19
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...
AZL-53622 CVE-2024-30896 affecting package influxdb 2.6.1-30
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...
UBUNTU-CVE-2024-30896
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...
CVE-2024-9851
CVE-2024-9851: LSX Tour Operator WordPress plugin
WordPress plugin LSX Tour Operator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-30896
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...
November 21, 2024—KB5046714 (OS Build 19045.5198) Preview
None None...
Access Control Bypass
Overview influxdb-client is an InfluxDB 2.0 Python client library Affected versions of this package are vulnerable to Access Control Bypass due to a business logic flaw that allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorizatio...
WordPress LSX Tour Operator plugin <= 1.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin LSX Tour Operator versions = 1.4.9...
AI Granny Daisy takes up scammers’ time so they can’t bother you
A mobile network operator has called in the help of Artificial Intelligence AI in the battle against phone scammers. Virgin Media O2 in the UK has built an AI persona called Daisy with the sole purpose of keeping scammers occupied for as long as possible. Basically, until the scammers give up,...
WordPress LSX Tour Operator Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)
Software LSX Tour Operator Type Plugin Vulnerable versions = 1.4.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ff9d84e2d494 Credits Francesco Carlucci...
Security Bulletin: Security vulnerability CVE-2024-39689 in Certifi python-certifi that is used by FileNet Content Manager and CP4BA - Filenet Content Manager Component
Summary Security vulnerability CVE-2024-39689 in Certifi python-certifi that is used by FileNet Content Manager and CP4BA - Filenet Content Manager Component in container Operator Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi python-certifi could provide weaker than expected...
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: apache-nifi, thingsboard, strimzi-kafka-operator, logstash, druid, prometheus-jmx-exporter...
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, logstash, apache-nifi, thingsboard, druid...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, logstash, apache-nifi, thingsboard, druid...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: apache-nifi, thingsboard, strimzi-kafka-operator, logstash, druid, prometheus-jmx-exporter...
The software used for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is vulnerable. This vulnerability allows attackers to compromise data integrity.
The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...
CVE-2024-11079 vulnerabilities
Vulnerabilities for packages: ansible-operator, py3-ansible-core...
