9083 matches found
Fedora: Security Advisory for rust-diskonaut (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: rust-diskonaut-0.11.0-18.fc40
Terminal disk space visual navigator...
AJ-Report SQL注入漏洞
AJ-Report is anji-plus open source a completely open source , drag and drop editing visual design tools. AJ-Report 1.4.1 and earlier versions of SQL injection vulnerability , there is no detailed vulnerability details provided...
CVE-2024-2038
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible fo...
CVE-2024-2038 Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible fo...
The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerabilities of Microsoft .NET software platforms and Microsoft Visual Studio development tools are caused by synchronization errors when using shared resources, allowing attackers to trigger service failures.
The vulnerabilities of Microsoft .NET software platforms and Microsoft Visual Studio development tools stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...
Security Updates for Microsoft Visual Studio Products (May 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution. CVE-2024-32002 - Remote Code Execution while...
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.26.4 is vulnerable to Cross Site Scripting (XSS)
Software Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Type Plugin Vulnerable versions = 1.26.4 Fixed in 1.26.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4400 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to execute arbitrary execute code with the victim's privileges, or to cause a denial-of-service attack. Successful exploitation requires the malicious party to trick the victim into...
Oracle Linux 9 : .NET / 8.0 (ELSA-2024-2842)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2842 advisory. 8.0.105-1.0.1 - Add support for Oracle Linux 8.0.105-1 - Update to .NET SDK 8.0.105 and Runtime 8.0.5 - Resolves: RHEL-35317 Tenable has extracted the...
Oracle Linux 9 : .NET / 7.0 (ELSA-2024-2843)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2843 advisory. 7.0.119-1.0.1 - Add OracleLinux support Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
CVE-2024-4363
CVE-2024-4363 affects Visual Portfolio, Photo Gallery & Post Grid (WordPress). The vulnerability is a Stored XSS via the title_tag parameter in the plugin’s code, affecting all versions up to 3.3.2. The root cause is insufficient input sanitization and output escaping, enabling authenticated atta...
Patch Tuesday - May 2024
Microsoft is addressing 61 vulnerabilities this May 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for three of the vulnerabilities published today. At time of writing, two of the vulnerabilities patched today are listed on CISA KEV. Microsoft is...
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...
CVE-2024-30046
CVE-2024-30046 is a denial-of-service vulnerability in Microsoft’s .NET/ASP.NET Core stack caused by a deadlock in Microsoft.AspNetCore.Server.Kestrel.Core.dll, leading to service unavailability. Connected advisories indicate the issue affects ASP.NET Core runtimes and associated Microsoft.AspNet...
