The vulnerability of the FRRouting software implementation for Unix-like systems lies in the existence of a loop with an unreachable exit condition. This allows a malicious actor to cause a service failure.

The vulnerability of the FRRouting software implementation on Unix-like systems lies in the fact that it sends specially crafted welcome messages with a one-to-one distribution flag, an interval field equal to 0, or any TLV containing a mandatory sub-TLV. This allows the attacker to enter an...

OPENSUSE-SU-2024:13126-1 opensuse-welcome-0.1.9+git.35.4b9444a-1.1 on GA media

These are all security issues fixed in the opensuse-welcome-0.1.9+git.35.4b9444a-1.1 package on the GA media of openSUSE Tumbleweed...

WordPress Dashboard Welcome for Elementor plugin <= 1.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Dashboard Welcome for Elementor versions = 1.0.7...

`libp2p-tokio-socks5` is unmaintained

Note the repository was archived without an issue so we link directly to the commit that marked the repository as unmaintained. To the best of the original authors knowledge the crate has no vulnerabilities as of the last release, it is just unmaintained due to laziness - new maintainer welcome...

openSUSE: Security Advisory for opensuse (openSUSE-SU-2023:0230-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Welcome Email Editor Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Welcome Email Editor Type Plugin Vulnerable versions = 5.0.6 Fixed in 5.0.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f7071fbb1d62 Credits ajaxhandler Required...

Welcome Email Editor < 5.0.7 - Subscriber+ Email Sending

Description The plugin does not have authorisation in its ajaxhandler function, allowing any authenticated users, such as subscriber to call it and send various emails...

welcome-ontour.de Improper Access Control vulnerability OBB-3779019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the openSUSE-welcome package for the openSUSE operating system allows a hacker to execute arbitrary code.

The vulnerability of the openSUSE-welcome package in the openSUSE operating system is related to defects in the storage of service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

Information disclosure

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

CVE-2023-32184

OpenSUSE opensuse-welcome CVE-2023-32184 is an insecure storage vulnerability impacting versions 0.1 before 0.1.9+git.35.4b9444a, allowing local attackers to execute code as the user running opensuse-welcome via a manipulated custom layout. The connected OSV entry confirms a fix in opensuse-welco...

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

openSUSE opensuse-welcome Security Vulnerabilities

openSUSE is a set of Linux-based free operating systems and open source community projects from SUSE Germany. A security vulnerability exists in opensuse-welcome versions 0.1 through 0.1.9+git.35.4b9444a, which stems from an issue with the insecure storage of sensitive information that could allo...

spring-boot: Spring Boot Welcome Page DoS Vulnerability

A flaw was found in Spring Boot, occurring prominently in Spring MVC with a reverse proxy cache. This issue requires Spring MVC to have auto-configuration enabled and the application to use Spring Boot's welcome page support, either static or templated, resulting in the application being deployed...

openSUSE 15 Security Update : opensuse-welcome (openSUSE-SU-2023:0230-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0230-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

OPENSUSE-SU-2023:0230-1 Security update for opensuse-welcome

This update for opensuse-welcome fixes the following issues: - CVE-2023-32184: Fixed possible security issues when using the feature to change the Xfce desktop layout, caused by a fixed temporary file path used in /tmp/layout boo1213708...

Security update for opensuse-welcome (moderate)

openSUSE Security Update: Security update for opensuse-welcome Announcement ID: openSUSE-SU-2023:0230-1 Rating: moderate References: 1213708 Cross-References: CVE-2023-32184 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This...