ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2024-43805 via jupyterlab (2.0.0)

jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

ibis-vega-transform (5.0.0) potentially affected by CVE-2024-43805 via jupyterlab (2.0.2)

jupyterlab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 5.0.0 Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a memory access problem in the xfrm component in the input error path...

python-pillow: buffer overflow in _imagingcms.c

A flaw was found in Pillow. The cmstransformnew function in src/imagingcms.c does not validate the length of its parameters before copying them into fixed-size buffers, leading to a buffer overflow, resulting in a denial of service...

ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2024-39700 via jupyterlab (2.0.0)

jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2024-39700 Source advisory: OSV:PYSEC-2024-322...

ibis-vega-transform (5.0.0) potentially affected by CVE-2024-39700 via jupyterlab (2.0.2)

jupyterlab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 5.0.0 Source cves: CVE-2024-39700 Source advisory: OSV:PYSEC-2024-322...

WordPress i-transform theme <= 3.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme i-transform versions = 3.0.9...

WordPress i-transform Theme <= 3.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software i-transform Type Theme Vulnerable versions = 3.0.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38764 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afcccf575710 Credits Dhabaleshwar Das Required...

Django: SQL injection in JSONField KeyTransform

A vulnerability was discovered in the JSONField KeyTransform functionality of Django. The vulnerability allowed SQL injection attacks by crafting malicious user input for the .values method. The vulnerability was demonstrated in the Django test suite, where a SQL syntax error was triggered by...

python-pillow: buffer overflow in _imagingcms.c

A flaw was found in Pillow. The cmstransformnew function in src/imagingcms.c does not validate the length of its parameters before copying them into fixed-size buffers, leading to a buffer overflow, resulting in a denial of service...

PT-2024-12776 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel ksmbd module affected versions not specified Description: A flaw was found in the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of...

CVE-2024-3319

An issue was identified in the Identity Security Cloud ISC Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host...

CVE-2024-3319: Improper Control of Generation of Code

An issue was identified in the Identity Security Cloud ISC Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::N_SSE2::DecompressIrrev::transform

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5429242285326336 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

SUSE CVE-2024-26980

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2allocaterspbuf If -ProtocolId is SMB2TRANSFORMPROTONUM, smb2 request size validation could be skipped. if request size is smaller than sizeofstruct smb2queryinforeq, slab-out-of-bounds read ca...

CVE-2024-3047

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via the transform function. This can allow unauthenticated attackers to make web requests to arbitrary locations originating from the web...

PT-2024-23399

Name of the Vulnerable Software and Affected Versions PDF Invoices & Packing Slips for WooCommerce plugin for WordPress versions up to, and including, 3.8.0 Description The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. Thi...

CVE-2024-3047: Server-Side Request Forgery (SSRF)

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via the transform function. This can allow unauthenticated attackers to make web requests to arbitrary locations originating from the web...

WordPress plugin PDF Invoices & Packing Slips for WooCommerce has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A security vulnerability exists i...

DEBIAN-CVE-2024-26980

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2allocaterspbuf If -ProtocolId is SMB2TRANSFORMPROTONUM, smb2 request size validation could be skipped. if request size is smaller than sizeofstruct smb2queryinforeq, slab-out-of-bounds read ca...