8481 matches found
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
Summary One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting XSS vulnerability due to improper handling of input where a number is expected leading to formula injection. Details The following code in 45Quadraticequationsolver.php concatenates the user supplied...
CVE-2024-44018 WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Istmo Plugins Instant Chat Floating Button for WordPress Websites allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for WordPress Websites: from n/a through 1.0.5...
CVE-2024-44018 WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for WordPress Websites: from n/a through =...
PT-2024-40274 · Saltcorn · Saltcorn
Name of the Vulnerable Software and Affected Versions: Saltcorn versions prior to the fixed version Description: The issue arises from the use of user-controlled data in the git clone command without proper validation, leading to a command injection vulnerability. This allows an attacker with adm...
Jenkins plugins Multiple Vulnerabilities (2024-10-02)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials...
Important: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release
Red Hat Developer Hub 1.3.0 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
RHSA-2024:0777 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
Bulletin has no description...
RHSA-2024:3831 Red Hat Security Advisory: containernetworking-plugins security and bug fix update
Bulletin has no description...
ROS-20241001-16
The compiler vulnerability for writing Babel JavaScript code is related to the use of plugins that rely on Babel's internal path.evaluate or path.evaluateTruthy methods. Exploitation of the of the vulnerability could allow an attacker to execute arbitrary code...
RHSA-2023:3663 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
Bulletin has no description...
RHSA-2023:3299 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
Bulletin has no description...
RHSA-2023:3198 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
Bulletin has no description...
RHSA-2024:4429 Red Hat Security Advisory: containernetworking-plugins security update
Bulletin has no description...
RHSA-2024:2272 Red Hat Security Advisory: containernetworking-plugins security update
Bulletin has no description...
RHSA-2024:0778 Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update
Bulletin has no description...
RHSA-2023:2367 Red Hat Security Advisory: containernetworking-plugins security and bug fix update
Bulletin has no description...
RHSA-2024:6186 Red Hat Security Advisory: containernetworking-plugins security update
Bulletin has no description...
RHSA-2024:4761 Red Hat Security Advisory: containernetworking-plugins security update
Bulletin has no description...