11099 matches found
OPENSUSE-SU-2024:12864-1 wasm-pack-0.11.0~0-2.1 on GA media
These are all security issues fixed in the wasm-pack-0.11.00-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12616-1 wasm-pack-0.10.3~0-2.1 on GA media
These are all security issues fixed in the wasm-pack-0.10.30-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12807-1 wasm-pack-0.11.0~0-1.1 on GA media
These are all security issues fixed in the wasm-pack-0.11.00-1.1 package on the GA media of openSUSE Tumbleweed...
OESA-2024-1708 rubygem-actionpack security update
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser. Security Fixes: Action Pack is a framework for handling and responding to web requests. Sin...
OESA-2024-1710 rubygem-actionpack security update
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser. Security Fixes: Action Pack is a framework for handling and responding to web requests. Sin...
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js micromatch & braces modules (CVE-2024-4067 & CVE-2024-4068)
Summary IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js micromatch & braces modules. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2024-4067 DESCRIPTION: Node.js micromatch module is vulnerable to a denial o...
Kibana 8.14.0/7.17.22 Security Update (ESA-2024-11)
Kibana uncontrolled resource consumption ESA-2024-11 A high-privileged user, allowed to create custom osquery packs could affect the availability of Kibana by uploading a maliciously crafted osquery pack. Affected Versions: Kibana versions after 7.13.0 and before 7.17.22 and versions after 8.0.0...
Information Disclosure
org.elasticsearch.plugin: x-pack-security is vulnerable to Information Disclosure. The vulnerability arises from the failure to enforce search restrictions during cross-cluster searches when an API key grants both search and replication rights to an index, which allows an attacker to access...
Security Bulletin: IBM Maximo Asset Management application is vulnerable to sensitive information disclosure (CVE-2024-22333)
Summary IBM Maximo Asset Management application is vulnerable to sensitive information disclosure. Vulnerability Details CVEID:CVE-2024-22333 DESCRIPTION: IBM Maximo Asset Management allows web pages to be stored locally which can be read by another user on the system. CVSS Base score: 4 CVSS...
CVE-2024-3925
The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 5.6.11 due to insufficient input sanitization a...
CVE-2024-3925
The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 5.6.7 due to insufficient input sanitization an...
CVE-2024-3925: Improper Neutralization of Input During Web Page Generation
The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 5.6.11 due to insufficient input sanitization a...
WordPress plugin Element Pack Elementor Addons Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-28410
Name of the Vulnerable Software and Affected Versions The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.6.7 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes ...
com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +15 more potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (10.0.2)
org.keycloak:keycloak-services MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 - com.github.vzakharchenko:keycloak-plugins 1.2...
org.keycloak:keycloak-authz-policy-drools (3.2.0.final), org.keycloak:keycloak-dependencies-server-all (3.2.0.final) +6 more potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (3.2.0.final)
org.keycloak:keycloak-services MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.0.final -...
org.keycloak:keycloak-authz-policy-drools (3.3.0.final), org.keycloak:keycloak-dependencies-server-all (3.3.0.final) +6 more potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (3.3.0.final)
org.keycloak:keycloak-services MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.final -...
Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server may crash when using a specially crafted query on certain columnar tables. (CVE-2024-31881)
Summary IBM® Db2® is vulnerable to a denial of service as the server may crash when using a specially crafted query on certain columnar tables by an authenticated user. Vulnerability Details CVEID:CVE-2024-31881 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is...
Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in the open source commons-compress library. (CVE-2024-25710, CVE-2024-26308)
Summary IBM® Db2® federated server is affected by vulnerabilities in the open source commons-compress library when using the NoSQL Blockchain wrapper. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop...
