expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

CVE-2021-24826

The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ v 4.0.1 or Admin+ v 4.0.2 users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. Please note that such attack is still...

CVE-2021-24825

The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ v 4.0.1 or Admin+ v 4.0.2 users to display arbitrary files from the filesystem such as logs, .htaccess etc, as well as perform Local File Inclusion...

Design/Logic Flaw

The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ v 4.0.1 or Admin+ v 4.0.2 users to display arbitrary files from the filesystem such as logs, .htaccess etc, as well as perform Local File Inclusion...

DEBIAN-CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

PT-2022-15931

Name of the Vulnerable Software and Affected Versions Go-Ethereum versions all Description A design flaw in Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node. This c...

WordPress Impexium Single Sign On plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Impexium Single Sign On plugin versions = 1.1. Solution No patched version available...

WordPress Impexium Single Sign On plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Impexium Single Sign On plugin versions = 1.1. Solution No patched version available...

WordPress netFORUM Single Sign On plugin <= 1.3.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress netFORUM Single Sign On plugin versions = 1.3.3. Solution No patched version available...

WordPress netFORUM Single Sign On plugin <= 1.3.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress netFORUM Single Sign On plugin versions = 1.3.3. Solution No patched version available...

PT-2022-28955

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.5 through 5.16.7 Description The issue is related to a crash with stop filters in single-range mode in the perf/x86/intel/pt module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-28868

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.15.21 Description A potential issue exists in the Linux Kernel that could lead to a crash when using stop filters in single-range mode. The actual impact and attack plausibility have not yet been proven...

CVE-2022-25262

In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...

IBM WebSphere Application Server security vulnerabilities

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WebSphere Application Server...

[SECURITY] Fedora 35 Update: zziplib-0.13.72-1.fc35

The zziplib library is intentionally lightweight, it offers the ability to easily extract data from files archived in a single zip file. Applications can bundle files into a single zip archive and access them. The implementation is based only on the free subset of compression with the zlib...

PT-2022-28512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.10.98 Description A potential issue exists in the Linux Kernel that could lead to a crash when using stop filters in single-range mode. The actual impact and attack plausibility have not yet been proven...

4 best practices to implement a comprehensive Zero Trust security approach

Today’s threat actors don’t see barriers, they see opportunities. As the old firewalls protecting the corporate network become obsolete amid the rush to adopt a hybrid workspace, implementing Zero Trust security has become an imperative across all sectors, both public and private. During this tim...

QEMU mode_sense_page Heap Buffer Overflow DoS

The vulnerability of the modesensepage function implementation in the QEMU hardware emulation software is related to a single-shift error when using the “page” parameter. Exploiting this vulnerability can allow an attacker to cause a system failure...