org.graylog.plugins:graylog-plugin-parent (2.5.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.5.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (3.2.0), org.graylog.plugins:graylog-plugin-web-parent (3.2.0) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.2.0)

org.graylog2:graylog2-server MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.2.0 - org.graylog.plugins:graylog-plugin-web-parent 3.2.0...

org.graylog.plugins:graylog-plugin-parent (3.2.1), org.graylog.plugins:graylog-plugin-web-parent (3.2.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.2.1)

org.graylog2:graylog2-server MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.2.1 - org.graylog.plugins:graylog-plugin-web-parent 3.2.1...

org.graylog.plugins:graylog-plugin-parent (4.0.14), org.graylog.plugins:graylog-plugin-web-parent (4.0.14) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.14)

org.graylog2:graylog2-server MAVEN version 4.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.14 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (4.0.1), org.graylog.plugins:graylog-plugin-web-parent (4.0.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.1)

org.graylog2:graylog2-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.1 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js glob-parent denial of service vulnerability( CVE-2021-35065)

Summary Potential Node.js glob-parent denial of service vulnerability CVE-2021-35065 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-35065 DESCRIPTION: Node.js glob-parent module...

Cross-Site Scripting (XSS)

org.alluxio:alluxio-parent is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim's browser, via the path parameter in the browse...

chicagoparent.com Cross Site Scripting vulnerability OBB-3472143

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

Tenda AC8 get_parentControl_list_Info function buffer overflow vulnerability

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1,000 megabytes, supporting dual-band concurrent transmission rates up to 1,167 Mbps, and equipped with full Gigabit ports 1 WAN port + 3 LAN ports to meet the needs of 100-1,000 megabit broadband...

PT-2023-4214 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 versions prior to V16.03.34.06 Description: The issue is related to a buffer overflow in the get parentControl list Info function of the Tenda AC8 router's firmware, allowing a remote attacker to execute arbitrary code. The...

nodejs:18 security, bug fix, and enhancement update

nodejs 1:18.14.2-2 - Provide simduft - Resolves: 2159389 1:18.14.2-1 - Rebase to 18.14.2 - Resolves: 2159389 - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920 nodejs-nodemon 2.0.20-2 - Patch bundled glob-parent -...

kernel: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the...

Security Bulletin: Open Source Dependency Vulnerability

Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2021-35065 DESCRIPTION: Node.js glob-parent module is vulnerable to a denial of service, caused by an error in the enclosure regex. By sending a specially crafted string prepended with the...

Red Hat libvirt 安全漏洞

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt that stems...

glob-parent: Regular Expression Denial of Service

A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...

glob-parent: Regular Expression Denial of Service

A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...

kernel: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to configure an arbitrary number of rx queues when creating an interface via netlink. This doesn't work for child PKEY interfaces because the...