25573 matches found
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to information exposure in a URL (CVE-2023-50954)
Summary An information exposure vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50954 DESCRIPTION: IBM InfoSphere Information Server returns sensitive information in URL information that could be used in further attacks against the system. CVSS...
PT-2024-26342 · Ibm · Ibm Mq Console
Name of the Vulnerable Software and Affected Versions: IBM MQ Console versions 9.3 LTS and 9.3 CD Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...
PT-2024-33813
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from dml2 core shared mode support and dml core mode support accessing the third element of dummy boolean, which has a size of 2. This results in an OVERRUN when...
WordPress WebP & SVG Support plugin <= 1.4.0 - Author+ Stored XSS via SVG vulnerability
Author+ Stored XSS via SVG vulnerability discovered by Bob Matyas, Rayhan Ramdhany Hanaputra in WordPress Plugin WebP & SVG Support versions = 1.4.0...
CVE-2024-3633
The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2024-3633
The WebP & SVG Support WordPress plugin, in versions through 1.4.0 , contains a vulnerability where it fails to properly sanitise uploaded SVG files . This flaw allows users with privileges as low as Author to upload malicious SVG files containing XSS payloads , leading to a Stored Cross-Site Scr...
CVE-2024-3633 WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2024-3633 WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2024-37138
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path traversal vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the application sending over an unauthorized file to the manag...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...
CVE-2024-3633: Improper Neutralization of Input During Web Page Generation
The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
PT-2024-22781 · Dell · Dell Powerprotect Data Domain
Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Domain versions prior to 7.13.0.0 Dell PowerProtect Data Domain LTS 7.7.5.40 Dell PowerProtect Data Domain LTS 7.10.1.30 Description: The issue is related to a weak cryptographic algorithm. A remote unauthenticated...
RHEL 8 / 9 : Red Hat Ceph Storage 5.3 (RHSA-2024:4118)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4118 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage...
Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to a denial of service attack using HTTP/2 protocol. [CVE-2024-27316]
Summary IBM HTTP Server powered by Apache used by IBM i is vulnerable to a denial of service attack due to no limit of continuation fames in HTTP/2 protocol as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as described in t...
CVE-2024-39293
In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db. This patch introduced a potential kernel crash when multiple napi instances redirect to the same...
Malicious code in active-support_alias_class_method (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acceptance-tests_support (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6053 Malicious code in support-hub (PyPI)
--- -= Per source details. Do not edit below this line.=-...