Aggregator

Weekly Report: 複数のマイクロソフト製品に脆弱性(link is external)

統合版 JPCERT/CC
5 months 1 week ago
複数のマイクロソフト製品には、脆弱性があります。同社は、今回修正された一部の脆弱性を悪用する攻撃をすでに確認しているとのことです。この問題は、Microsoft Updateなどを用いて、更新プログラムを適用することで解決します。詳細は、開発者が提供する情報を参照してください。

US DOGE Staffer Sent Unencrypted Treasury Data over Email(link is external)

DataBreachToday.com
5 months 1 week ago
Agency Official Says Ex-DOGE Staffer's Data Breach Violated Security Policy
An ex-Department of Government Efficiency staffer violated Treasury rules by sending unencrypted personal data to two senior Trump administration officials without approval, raising concerns about the task force’s apparent disregard for or lack of knowledge about critical data security policies.

CVE-2024-2640 | Watu Quiz Plugin up to 3.4.1.1 on WordPress Setting cross site scripting(link is external)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as problematic, was found in Watu Quiz Plugin up to 3.4.1.1 on WordPress. This affects an unknown part of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-2640. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-2696 | WP-FeedStats socialdriver-framework Plugin 2024.0.0 on WordPress Setting cross site scripting(link is external)

Vuldb Updates
5 months 1 week ago
A vulnerability has been found in WP-FeedStats socialdriver-framework Plugin 2024.0.0 on WordPress and classified as problematic. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-2696. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad