3747 matches found
CLSA-2024-1723146030 Fix CVE(s): CVE-2021-3733
SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2021-3733.patch: Fix ReDoS vulnerability in AbstractBasicAuthHandler class of Lib/urllib2.py - CVE-2021-3733...
CVE-2024-42252
CVE-2024-42252 is described as a Linux kernel vulnerability resolved by replacing BUG_ON() with WARN_ON() in the closure handling path. The issue arises if a BUG_ON() can be hit in the wild, which would not be appropriate and could lead to a kernel oops. The fix is to use WARN_ON() instead of BUG...
CVE-2024-42252: Reachable Assertion
In the Linux kernel, the following vulnerability has been resolved: closures: Change BUGON to WARNON If a BUGON can be hit in the wild, it shouldn't be a BUGON For reference, this has popped up once in the CI, and we'll need more info to debug it: 03240 ------------ cut here ------------ 03240...
CVE-2024-38983: Improperly Controlled Modification of Object Prototype Attributes
Prototype Pollution in alykoshin mini-deep-assign v0.0.8 allows an attacker to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the assign method at /lib/index.js:91...
Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...
GHSA-XCR9-PM5W-GVH2 ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41375
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41375: Improper Neutralization of Input During Web Page Generation
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41374: Improper Neutralization of Input During Web Page Generation
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41373: Improper Limitation of a Pathname to a Restricted Directory
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41373
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...
CVE-2024-41375
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
ICEcoder 安全漏洞
ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which originated from a discovery via lib/terminal-xhr.php that contained a cross-site scripting...