7108 matches found
Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.17 and earlier
Summary This fix upgrades to Websphere Liberty 24.0.0.6, socket.io 3.0.2, and grpc-js 1.8.22. Websphere Liberty is used by the IBM Answer Retrieval for Watson Discovery swagger microservice. Socket.io and grpc-js are used by the IBM Answer Retrieval for Watson Discovery user interfaces for...
CVE-2024-37145
Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a reflected cross-site scripting vulnerability occurs in the /api/v1/chatflows-streaming/id endpoint. If the default configuration is used unauthenticated, an attacker may be able...
@mongodb-js/compass-aggregations (0.0.0-next-4384d1fb0545d3f19fa808079b2b78538a3277a8), @mongodb-js/compass-app-stores (0.0.0-next-4384d1fb0545d3f19fa808079b2b78538a3277a8) +18 more potentially affected by CVE-2024-6376 via @mongodb-js/connection-form (>=0.0.0-experimental-1c53312ce4905234885618d41ae95fde9c21aa18, <=0.9.1)
@mongodb-js/connection-form NPM version =0.0.0-experimental-1c53312ce4905234885618d41ae95fde9c21aa18, =0.0.0-next-01cf7502bf07fa34d813fb2584510aaecb7e19d0, =0.0.0-experimental-1c53312ce4905234885618d41ae95fde9c21aa18, =0.0.0-experimental-1c53312ce4905234885618d41ae95fde9c21aa18, =5.29.1 -...
CVE-2024-5062
A reflected Cross-Site Scripting XSS vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, specifically within the survey redirect parameter. This flaw allows an attacker to redirect users to a...
CVE-2024-6416: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...
Use After Free
@fastly/js-compute is vulnerable to Use After Free. The vulnerability is due to re-use of previously freed memory in the FetchEvent.client and certain CacheEntry.prototype and Device.lookup functions. This issue could allow for an unintended data leak and often results in a Compute service crash...
@adobe/helix-deploy (>=9.1.9, <=11.1.13), @adobe/helix-universal-devserver (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-38375 via @fastly/js-compute (>=3.1.1, <=3.15.0)
@fastly/js-compute NPM version =3.1.1, =9.1.9, =1.0.0, =1.0.1 Source cves: CVE-2024-38375 Source advisory: OSV:GHSA-MP3G-VPM9-9VQV...
CVE-2024-38375
@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...
CVE-2024-38375 @fastly/js-compute use-after-free in some host call implementations
@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...
Fastly js-compute-runtime security vulnerability
Fastly js-compute-runtime is a Fastly open source runtime environment. A security vulnerability exists in Fastly js-compute-runtime, which stems from the implementation of multiple functions containing post-release reuse vulnerabilities...
CVE-2024-38375: Use After Free
@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...
PT-2024-27968
Name of the Vulnerable Software and Affected Versions @fastly/js-compute versions prior to 3.16.0 Description The implementation of several functions in the @fastly/js-compute package includes a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding...
Malicious code in symbl-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3073 Malicious code in symbl-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2656 Malicious code in meechum-user-lib-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gtm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2442 Malicious code in gtm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in discord.js-invites (npm)
--- -= Per source details. Do not edit below this line.=-...