WordPress plugin SEO SIMPLE PACK security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-22156

Name of the Vulnerable Software and Affected Versions SEO SIMPLE PACK plugin for WordPress versions prior to 3.2.2 Description The issue allows unauthenticated attackers to extract limited information about password-protected posts via the META description. Recommendations For versions prior to...

CVE-2024-2795: Exposure of Sensitive Information to an Unauthorized Actor

The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.1 via META description. This makes it possible for unauthenticated attackers to extract limited information about password protected posts...

Security Bulletin: IBM MQ is affected by a vulnerability in the IBM Runtime Environment, Java Technology Edition (CVE-2024-21085)

Summary An issue was identified with IBM Runtime Environment, Java Technology Edition, Version 8 which is shipped with IBM MQ. Vulnerability Details CVEID:CVE-2024-21085 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low...

Security Bulletin: IBM MQ is vulnerable to a denial of service attack (CVE-2024-31919)

Summary IBM MQ has addressed a denial of service vulnerability caused by an error processing messages when an API Exit using MQBUFMH is used. Vulnerability Details CVEID:CVE-2024-31919 DESCRIPTION: IBM MQ, in certain configurations, is vulnerable to a denial of service attack caused by an error...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2024-2511)

Summary IBM MQ Appliance has addressed an OpenSSL denial of service vulnerability. Vulnerability Details CVEID:CVE-2024-2511 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by improper server configuration validation. By using a specially crafted server configuration, a remote...

Security Bulletin: IBM MQ is affected by a password disclosure vulnerability (CVE-2024-35156)

Summary IBM MQ has addressed a password disclosure vulnerability in the IBM MQ REST API. Vulnerability Details CVEID:CVE-2024-35156 DESCRIPTION: IBM MQ could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informatio...

Malicious code in WindowsAPICodePack.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2830 Malicious code in packs-a (npm)

--- -= Per source details. Do not edit below this line.=-...

org.keycloak:keycloak-dependencies-server-all (8.0.0), org.keycloak:keycloak-server-feature-pack (8.0.0) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (8.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +16 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (15.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +17 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (14.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

org.keycloak:keycloak-dependencies-server-all (9.0.2), org.keycloak:keycloak-server-feature-pack (9.0.2) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (9.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.2), com.github.vzakharchenko:cisco-radius-plugin (1.3.2) +15 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (12.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.2 -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1), org.keycloak:keycloak-server-feature-pack (3.4.1.cr1) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (3.4.1.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.cr1 -...

org.keycloak:keycloak-dependencies-server-all (19.0.2), org.keycloak:keycloak-guides (19.0.2) +8 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (19.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +3 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (11.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +15 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (12.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2), org.keycloak:keycloak-server-feature-pack (3.3.0.cr2) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (3.3.0.cr2)

org.keycloak:keycloak-ldap-federation MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr2 -...

org.keycloak:keycloak-dependencies-server-all (5.0.0), org.keycloak:keycloak-server-feature-pack (5.0.0) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (5.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 5.0.0 -...