4190 matches found
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: GHSA-V62G-JWJ9-RFVX...
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: OSV:GHSA-V62G-JWJ9-RFVX...
nl.basjes.parse.useragent:yauaa-drill (>=7.14.0, <=7.26.1), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (>=1.21.0, <=1.21.1) +32 more potentially affected by CVE-2023-48362 via org.apache.drill.exec:drill-java-exec (>=1.21.0, <=1.21.1)
org.apache.drill.exec:drill-java-exec MAVEN version =1.21.0, =7.14.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.0, =1.21.1 and more Source cves: CVE-2023-48362 Source advisory: MEND:CVE-2023-48362...
PT-2024-37975 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A problematic issue was found in the Import Option List component, specifically affecting the curl exec function in the /admin/forms/option lists/edit.php file. The manipulation of the url argument leads ...
dockerd exec-path DoS
The vulnerability of the exec-path configuration in the dockerd daemon of the Docker Desktop operating system for container application development and delivery involves deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2024-5652
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode...
CVE-2024-5652 In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode...
PT-2024-30726
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The Linux kernel has a vulnerability that can cause an event leak upon exec and file release. This occurs when the perf pending task work is never waited upon the matching event release,...
Docker Desktop Security Vulnerabilities
Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...
CVE-2024-5652: Uncontrolled Resource Consumption
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode...
GHSA-RRQQ-FV6M-692M vanna vulnerable to remote code execution caused by prompt injection
In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...
CVE-2024-5826
In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...
CVE-2024-5826
CVE-2024-5826 – vanna-ai/vanna has a remote code execution vulnerability in the vanna.ask function due to prompt injection. The root cause is the absence of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in src/vanna/base/bas...
CVE-2024-5826
In the latest version of vanna-ai/vanna, the "vanna.ask" function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the "exec" function in...
CVE-2024-5826 Remote Code Execution via Prompt Injection in vanna-ai/vanna
In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...
CVE-2024-5826: Improper Control of Generation of Code
In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...
vanna Code Injection Vulnerability
Vanna is a personalized AI SQL agent from Vanna. vanna suffers from a code injection vulnerability that stems from a lack of sandboxing for executing LLM-generated code, which allows an attacker to manipulate the exec function in src/vanna/base/base.py, which can be exploited by an attacker to...
SUSE CVE-2024-37026
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if migration exec queue shares engines with...
CVE-2024-37026: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if migration exec queue shares engines with...