CVE-2024-43947

Cross-Site Request Forgery CSRF vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26...

PT-2024-30808 · WordPress · Wp Armour Extended

Name of the Vulnerable Software and Affected Versions: WP Armour Extended versions 1.26 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

WordPress plugin WP Armour Extended 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP Armour Extended 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WP Armour Extended versions = 1.26...

PT-2024-28028 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS versions prior to 1.26.0 Dell BIOS versions prior to 1.35.0 Dell BIOS versions prior to 2.32.0 Description: The issue is related to an Improper Input Validation vulnerability in an externally developed component of Dell BIOS. A high...

GHSA-4265-CCF5-PHJ5 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

CVE-2024-26308 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

CVE-2024-26308 Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

CVE-2024-26308

CVE-2024-26308 affects Apache Commons Compress: Allocation of Resources Without Limits or Throttling. The IBM bulletin lists the vulnerability as present in Apache Commons Compress 1.21 through 1.25.x and fixes it in 1.26. Impact is resource exhaustion/denial of service with a base score of 5.5 (...

Apache Commons Compress Security Vulnerability

Apache Commons Compress is an American Apache Apache Foundation library for processing compressed files. A security vulnerability exists in Apache Commons Compress versions 1.21 through prior to 1.26, which stems from unrestricted resource allocation...

PT-2024-2688

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.21 through 1.25 Description The issue is related to an uncontrolled resource consumption vulnerability in Apache Commons Compress, which can be exploited by an attacker to impact the availability of protected...

kodbox 操作系统命令注入漏洞

kodbox is a web file manager. An operating system command injection vulnerability exists in kodbox version 1.26, which stems from the file webconsole.php that can lead to operating system command injection...

Security Bulletin: IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-28642) (CVE-2023-27561)

Summary IBM Cloud Kubernetes Service is affected by two security vulnerabilities found in containerd where 1 runc could allow a remote attacker to bypass security restrictions, caused by a symbolic link following vulnerability CVE-2023-28642 and 2 runc could allow a local authenticated attacker t...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS version v.1.26. An attacker has...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS version v.1.26. An attacker has...

PT-2023-21897 · Jenkins · Jenkins Cppcheck Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cppcheck Plugin versions 1.26 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape file names from Cppcheck report files before showing them on t...

Cesanta mJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta mJS version 1.26, which stems from the...