CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43794

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

PT-2024-30652 · Open Edx +1 · Openedx-Atlas +4

Name of the Vulnerable Software and Affected Versions: openedx-translations affected versions not specified edx-platform versions from 'redwood' to 'master' Description: The openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex...

SonicOS Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Gen 5 and Gen 6 devices, as well as Gen 7...

PT-2024-30064 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF in Pligg CMS. This occurs via the admin/admin page.php endpoint with specific parameters: link id and mode. The link id is set to 1 and the mode is...

PT-2024-20039 · Oppo · Coloros Internet Browser

Name of the Vulnerable Software and Affected Versions: ColorOS Internet Browser version 45.10.3.4.1 Description: The issue allows a remote attacker to execute arbitrary JavaScript code via the com.android.browser.RealBrowserActivity component. Recommendations: For version 45.10.3.4.1, consider...

CVE-2024-1975 affecting package dhcp for versions less than 4.4.3.P1-2

CVE-2024-1975 affecting package dhcp for versions less than 4.4.3.P1-2. A patched version of the package is available...

CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2

CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2. A patched version of the package is available...

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2019-10638 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2019-10638 affecting package hyperv-daemons for versions less than 6.6.35.1-1. A patched version of the package is available...

CVE-2022-41722 affecting package golang for versions less than 1.22.7-2

CVE-2022-41722 affecting package golang for versions less than 1.22.7-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3

CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3. A patched version of the package is available...

CVE-2024-24859 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-24859 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it...

PT-2024-27243 · Unknown · Ada Web Server

Name of the Vulnerable Software and Affected Versions: Ada Web Server version 20.0 Description: An issue was discovered in Ada Web Server when configured to use SSL, which is not the default setting. The SSL/TLS used to establish connections to external services is done without proper hostname...

WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Products, Order & Customers Export for WooCommerce Type Plugin Vulnerable versions = 2.0.11 Fixed in 2.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43127 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0c64f76a48fe...

PT-2024-28398 · Gl.Inet · X750 +19

Name of the Vulnerable Software and Affected Versions: GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 version 4.3.11 GL-iNet products MT3000/MT2500/AXT1800/AX1800/A1300/X300B version 4.5.16 GL-iNet products XE300 version 4.3.16 GL-iNet products E750 version 4.3....