GHSA-FJ8F-56WC-Q36R rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

SUSE-SU-2023:2846-1 Security update for go1.20

This update for go1.20 fixes the following issues: go was updated to version 1.20.6 bsc1206346: - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http bsc1213229...

PT-2023-22319 · Origin · Ats Pro

Name of the Vulnerable Software and Affected Versions: Origin Software ATS Pro versions prior to 20230714 Description: The issue allows for authentication abuse and bypass through a user-controlled key, enabling unauthorized access. Recommendations: For versions prior to 20230714, update to a...

PT-2023-25604 · WordPress · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses plugin versions prior to 3.8.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-18617 · WordPress · Mr.Vibe Vslider Multi Image Slider

Name of the Vulnerable Software and Affected Versions: Mr.Vibe vSlider Multi Image Slider for WordPress plugin versions = 4.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web applicatio...

PT-2023-21246 · Sajjad Hossain · Wp Reroute Email

Name of the Vulnerable Software and Affected Versions: Sajjad Hossain WP Reroute Email plugin versions = 1.4.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

PT-2023-25722 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series versions 20.1R1 and later versions Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series versions 20.2 through 20.2R3-S6 Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series...

PT-2023-25538 · Bitdefender · Bitdefender Engines

Name of the Vulnerable Software and Affected Versions: Bitdefender Engines versions 7.94791 and lower Description: An out-of-bounds write issue in Bitdefender Engines on Windows causes the engine to crash. Recommendations: For versions 7.94791 and lower, update to a version higher than 7.94791 to...

PT-2023-25842 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue is a Cross Site Scripting XSS vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script...

CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...

GHSA-4Q2Q-Q5PW-2342 Apache Airflow Apache Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxyuser option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: before 6.1.2. It is recommended updatin...

PT-2023-26024 · Elecom +1 · Elecom Wrc-1167Febk-A +8

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GHBK3-A versions 1.24 and earlier ELECOM WRC-1167FEBK-A versions 1.18 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM...

PT-2023-3800 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to a Path Traversal vulnerability that allows a remote authenticated attacker to read arbitrary files from the...

PT-2023-4148 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S10 Juniper Networks Junos OS versions 20.1 prior to 20.1R3-S4 Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S6 Juniper Networks Junos OS versions 20.3 prior to 20.3R3-S6 Juniper...

PT-2023-3990 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to an authentication bypass vulnerability in the SonicWall Analytics and SonicWall Global Management System GMS...

PT-2023-26278 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.1 Description: The issue allows for reflected XSS via the Referer header during artifact downloads. Recommendations: For versions prior to 2023.05.1, update to version 2023.05.1 or later to resolve...

PT-2023-24448 · WordPress · About Me 3000

Name of the Vulnerable Software and Affected Versions: About Me 3000 widget plugin for WordPress versions up to, and including, 2.2.6 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...

PT-2023-12522 · WordPress · Qtranslate Slug

Name of the Vulnerable Software and Affected Versions: Qtranslate Slug plugin for WordPress versions up to and including 1.1.18 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save postdata function. This allows unauthenticated...

PT-2023-20086 · Unknown · Reservation.Studio

Name of the Vulnerable Software and Affected Versions: Reservation.Studio Reservation.Studio widget plugin versions 1.0.11 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Reservation.Studio Reservation.Studio widget plugin. This issue allows for malicious requests to ...

PT-2023-19346 · Unknown · Dave Jesch Database Collation Fix

Name of the Vulnerable Software and Affected Versions: Dave Jesch Database Collation Fix plugin versions 1.2.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...