PT-2024-18421 · Unknown · Sourcecodester Online Job Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Job Portal version 1.0 Description: A problematic vulnerability was found in the Manage Walkin Page component, specifically in the file /Employer/ManageWalkin.php. The issue arises from the manipulation of the Job Title...

GHSA-4M6J-23P2-8C54 Armeria SAML authentication bypass due to missing validation on unsigned SAML messages

Impact The SAML implementation provided by armeria-saml currently accepts unsigned SAML messages assertions, logout requests, etc. as they are, rather than rejecting them by default. As a result, an attacker can forge a SAML message to authenticate themselves, despite the fact that such an unsign...

CVE-2024-27087 Kirby cross-site scripting (XSS) in the link field "Custom" type

Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the entered link to the relevant URL format. It also includes a "Custom" link type for advanced use cases that don't fit any of the pre-defined link formats. As th...

GHSA-XRVH-RVC4-5M43 Kirby vulnerable to unrestricted file upload of user avatar images

TL;DR This vulnerability affects all Kirby sites that might have potential attackers in the group of authenticated Panel users. The attack requires user interaction by another user or visitor and cannot be automated. ---- Introduction Unrestricted upload of files with a dangerous type is a type o...

CVE-2024-22201 Jetty connection leaking on idle timeout when TCP congested

Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to st...

CVE-2023-52466

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-0439

CVE-2024-0439 describes a privilege-management flaw where manager-level users can modify restricted settings via direct HTTP requests despite UI-level protections. The issue is not labeled as critical in the sources, but multiple advisories note it should be patched to enforce the intended permis...

g-motty.net Improper Access Control vulnerability OBB-3858201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-0069 affecting package kernel for versions less than 5.15.148.2-2

CVE-2014-0069 affecting package kernel for versions less than 5.15.148.2-2. A patched version of the package is available...

CVE-2023-6915 affecting package kernel for versions less than 5.15.148.2-2

CVE-2023-6915 affecting package kernel for versions less than 5.15.148.2-2. A patched version of the package is available...

CVE-2024-24785 affecting package golang for versions less than 1.21.6-1

CVE-2024-24785 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...

CVE-2021-38593 affecting package qt5-qtbase for versions less than 5.12.11-11

CVE-2021-38593 affecting package qt5-qtbase for versions less than 5.12.11-11. A patched version of the package is available...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

CVE-2022-41723 affecting package golang for versions less than 1.21.6-1

CVE-2022-41723 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...

CVE-2024-22195 affecting package python-jinja2 for versions less than 3.0.3-3

CVE-2024-22195 affecting package python-jinja2 for versions less than 3.0.3-3. A patched version of the package is available...

`@backstage/backend-common` vulnerable to path traversal through symlinks

Impact Paths checks with the resolveSafeChildPath utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. Patches Patched in @backstage/backend-common version 0.21.1. Patched in @backstage/backend-common version 0.20.2. Patch...

Security Bulletin: IBM Aspera Console 3.4.2 PL7 has addressed multiple vulnerabilities (CVE-2022-37436, CVE-2021-34798)

Summary This Security Bulletin addresses security vulnerabilities that have been remediated CVE-2022-37436, CVE-2021-34798 in IBM Aspera Console 3.4.2 PL7. Vulnerability Details CVEID:CVE-2022-37436 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by the us...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

CVE-2024-26150 `@backstage/backend-common` vulnerable to path traversal through symlinks

@backstage/backend-common is a common functionality library for backends for Backstage, an open platform for building developer portals. In @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the resolveSafeChildPath utility were not exhaustive enough, leadi...

CVE-2024-26589

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTRTOFLOWKEYS For PTRTOFLOWKEYS, checkflowkeysaccess only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So the variable offset is not...