CVE-2024-34703 Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding where the parameter...

Botan Security Vulnerabilities

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms including AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan that stems from allowing the use of explicit encoding to present ECDSA X.509 certificates, which, whe...

Malicious code in a1426kt-prime-number (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sber-sberx-prime (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2985 Malicious code in sber-sberx-prime (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2895 Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-8812 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition software for Windows versions prior to 24.2 Description: The issue is related to an uncontrolled search path in the Intel Quartus Prime Pro software, which may allow an authenticated user to potentially enabl...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

WordPress Prime Slider plugin <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Pacific Widget vulnerability discovered by wesley wcraft in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.14.7...

OpenSSL 1.1.1 < 1.1.1e Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.1.1e. It is, therefore, affected by a vulnerability as referenced in the 1.1.1e advisory. - There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are...

WordPress plugin Prime Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Fedora: Security Advisory for rust-uu_factor (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.7 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.14.7 Fixed in 3.14.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5640 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8d28eb0738f Credits...

PT-2024-36811 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.14.7 Description: The issue is related to Stored Cross-Site Scripting via the id attribute within the Pacific widget due to insufficient input...

RHEL 6 : python-crypto (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive...

[SECURITY] Fedora 39 Update: rust-uu_factor-0.0.23-3.fc39

factor uutils display the prime factors of each NUMBER...

The vulnerability of the Avira Spotlight service is a flaw in the comprehensive antivirus protection provided by Avira Prime. This vulnerability allows attackers to elevate their privileges and execute arbitrary codes.

The vulnerability of Avira Spotlight’s comprehensive antivirus protection solution, Avira Prime, is related to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...