Security Bulletin: Multiple vulnerabilities in Dojo toolkit shipped with IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client

Summary Dojo toolkit is used for UI in IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client. These vulnerabilities are reported in Dojo toolkit CVE-2019-10785, CVE-2018-6561, CVE-2020-4051, CVE-2018-15494, CVE-2020-5259. Vulnerability Details CVEID:CVE-2019-10785 DESCRIPTION:...

Moderate: Red Hat Security Advisory: Migration Toolkit for Runtimes security, bug fix and enhancement update

Migration Toolkit for Runtimes 1.2.5 release Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2024-32586

The CVE-2024-32586 entry corresponds to a Cross-Site Scripting (XSS) vulnerability in the WordPress Gutenberg Block Editor Toolkit plugin (EditorsKit) for WordPress. Affected versions are

WordPress Gutenberg Block Editor Toolkit plugin <= 1.40.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Gutenberg Block Editor Toolkit versions = 1.40.4...

WordPress Gutenberg Block Editor Toolkit Plugin <= 1.40.4 is vulnerable to Cross Site Scripting (XSS)

Software Gutenberg Block Editor Toolkit Type Plugin Vulnerable versions = 1.40.4 Fixed in 1.40.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32586 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a7cac184918b Credits Steven Julian Require...

编号撤回

Lunary is a production toolkit for LLMs from lunary open source. This CVE number has been withdrawn...

CVE-2024-30403

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. When Layer 2 traffic is sent through a logical interface, MAC learning happens. If during this process,...

WordPress Ovic Addon Toolkit plugin <= 2.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Ovic Addon Toolkit versions = 2.6.1...

WordPress Ovic Addon Toolkit Plugin <= 2.6.1 is vulnerable to Broken Access Control

Software Ovic Addon Toolkit Type Plugin Vulnerable versions = 2.6.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32432 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7ad5ff183e69 Credits Nguyen Xuan Chien Required...

The vulnerability in the Intel oneAPI Toolkit’s software development tools relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability in the Intel oneAPI Toolkit development tools relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Intel oneAPI Toolkit, a collection of software development tools, is related to deficiencies in access control. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the Intel oneAPI Toolkit software development tools is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to trigger a service failure...

编号撤回

Lunary is a production toolkit for LLMs from lunary open source. This CVE number has been withdrawn...

lunary 安全漏洞

Lunary is a production toolkit for LLM that is open sourced by lunary. A security vulnerability exists in lunary that stems from allowing a deleted user to change the name of an organization without authorization...

lunary 安全漏洞

lunary is a production toolkit for LLM. An information disclosure vulnerability exists in lunary. An attacker can exploit this vulnerability to obtain sensitive information...

NVIDIA CUDA Toolkit < 12.4.1 Multiple Vulnerabilities

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.4.1. It is, therefore affected by multiple vulnerabilities. - NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading...

io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx

A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge,...

ADOKit - Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...

CVE-2024-0072

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service...

DEBIAN-CVE-2024-0072

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service...

CVE-2024-0072

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service...