Author: Angelo Barbosa

CVE-2024-25959 | Dell PowerScale OneFS up to 9.4.0.16/9.5.0.7/9.7.0.0/9.7.0.1 log file (dsa-2024-115)

A vulnerability was found in Dell PowerScale OneFS up to 9.4.0.16/9.5.0.7/9.7.0.0/9.7.0.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to sensitive information in log files. This vulnerability is handled as CVE-2024-25959. The attack needs to be approached locally. There is no exploit...

Read More

CVE-2024-2947 | Cockpit sosreport command injection

A vulnerability was found in Cockpit. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component sosreport Handler. The manipulation leads to command injection. This vulnerability is known as CVE-2024-2947. The attack needs to be approached within the local network. There is no exploit available. It is recommended to apply a patch to fix this...

Read More

CVE-2024-2475 | Media Library Assistant Plugin up to 3.13 on WordPress Shortcode mla_gallery cross site scripting

A vulnerability was found in Media Library Assistant Plugin up to 3.13 on WordPress. It has been classified as problematic. Affected is the function mla_gallery of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-2475. It is possible to launch the attack remotely. There is no exploit...

Read More