PT-2024-42039

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

CVE-2024-6485: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

PT-2024-42040

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 CVE-2023-36617 ruby: Buffer overread vulnerability...

PT-2024-42036

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

PT-2024-42038

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

PT-2024-42037

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

CVE-2024-5444: Improper Neutralization of Input During Web Page Generation

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Critical Photon OS Security Update - PHSA-2024-5.0-0314

Updates of 'httpd', 'emacs' packages of Photon OS have been released...

dotnet: DoS in System.Text.Json

A vulnerability was found in .NET. This issue can cause a denial of service in the System.Text.Json deserialization...

dotnet: DoS in System.Text.Json

A vulnerability was found in .NET. This issue can cause a denial of service in the System.Text.Json deserialization...

CVE-2024-38517

A flaw was found in rapidjson. Processing a crafted JSON text from a stream can cause an integer overflow in the GenericReader::ParseNumber function in the include/rapidjson/reader.h file, resulting in escalation of privileges. Mitigation Do not process or parse untrusted JSON text with rapidjson...

CVE-2024-21417

Windows Text Services Framework Elevation of Privilege Vulnerability...

CVE-2024-21417

Windows Text Services Framework Elevation of Privilege Vulnerability...

CVE-2024-21417: Missing Authorization

Windows Text Services Framework Elevation of Privilege Vulnerability...

HarfBuzz: Denial of Service

Background HarfBuzz is an OpenType text shaping engine. Description Multiple vulnerabilities have been discovered in HarfBuzz. Please review the CVE identifiers referenced below for details. Impact hb-ot-layout-gsubgpos.hh in HarfBuzz allows attackers to trigger On^2 growth via consecutive marks...

CVE-2024-21417

CVE-2024-21417 is a Windows Text Services Framework elevation of privilege vulnerability. The connected records confirm the affected component as Windows Text Services Framework (with CVE-2024-21417 listed as impacting Windows CoreMessaging in one entry) and describe the impact as obtaining incre...

CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability

...

CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability

...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when using .NET's JsonSerializer.DeserializeAsyncEnumerable function on untrusted input. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...