2233 matches found
CVE-2024-34555 WordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in URBAN BASE Z-Downloads.This issue affects Z-Downloads: from n/a through 1.11.3...
CVE-2024-34555 WordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in URBAN BASE Z-Downloads.This issue affects Z-Downloads: from n/a through 1.11.3...
PT-2024-25970 · Unknown · Urban Base Z-Downloads
Name of the Vulnerable Software and Affected Versions: URBAN BASE Z-Downloads versions 1.11.3 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Z-Downloads component. Recommendations: For versions 1.11.3 and earlier, update to a...
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a remote attack due to Apache Commons Net (CVE-2032-37533)
Summary The IBM Integration Bus for z/OS toolkit is vulnerable to a remote attack due to Apache Commons Net. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2021-37533 DESCRIPTION: Apache Commons Net could allow a remote attacker to obtain...
.NET 6.0 bug fix update
An update is available for dotnet6.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...
WordPress Z-Downloads plugin <= 1.11.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Z-Downloads versions = 1.11.3...
WordPress Z-Downloads Plugin <= 1.11.3 is vulnerable to Arbitrary File Upload
Software Z-Downloads Type Plugin Vulnerable versions = 1.11.3 Fixed in 1.11.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-34555 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID b00ddc85506e Credits younsoung kim, SeoHyeon Lee, MyungJu Kim,...
CVE-2024-22472
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...
CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...
CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...
CVE-2024-22472
Summary: CVE-2024-22472 concerns Silicon Labs 500 Series Z-Wave devices. A buffer overflow in the 500 Series SDK (versions prior to v6.85.2) can occur when processing certain frames (long S0 frames) on 500 Series Z‑Wave devices, leading to Denial of Service and potentially remote code execution. ...
golang security update
1.21.9-2 - Rebuilt for z-stream - Related: RHEL-24312 - Related: RHEL-28940 1.21.9-1 - Fix CVE-2024-1394 - Fix CVE-2023-45288 - Resolves RHEL-24312 - Resolves RHEL-28940...
PT-2024-19441 · Silicon · Silicon Labs 500 Series +1
Name of the Vulnerable Software and Affected Versions: Silicon Labs 500 Series Z-Wave devices versions prior to v6.85.2 Description: A buffer overflow issue may allow Denial of Service and potential remote code execution. This issue affects Silicon Labs 500 Series SDK running on Silicon Labs 500...
Silicon Labs 500 Series Z-Wave 安全漏洞
Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs. A security vulnerability exists in the Silicon Labs 500 Series Z-Wave. An attacker exploited the vulnerability to cause a denial of service and potentially remote code execution...
bind security update
bind 9.16.23-18.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-18.1 - Rebuild with correct z-stream tag again 32:9.16.23-18 - Prevent crashing at masterformat system test CVE-2023-6516 32:9.16.23-17 - Import tests for large DNS messages fix - Add downstream...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to Eclipse Jetty (CVE-2024-22201)
Summary IBM App Connect Enterprise Toolkit and IBM Integration Bus for z/OS Toolkit are vulnerable to a denial of service due to Eclipse Jetty. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2024-22201 DESCRIPTION: Eclipse Jetty is...
Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. 'Red Hat Product Security has rated this update a...
SUSE CVE-2022-48636
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasdaliasgetstartdev due to missing pavgroup Fix Oops in dasdaliasgetstartdev function caused by the pavgroup pointer being NULL. The pavgroup pointer is checked on the entrance of the function but without...
ALSA-2024:2098 Important: container-tools:rhel8 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: containerinitt does not possess ptrace process context almalinux-8.9.0.z JIRA:AlmaLinux-28923 Security Fixes: podman: full container escape at build time CVE-2024-1753...