UBUNTU-CVE-2024-3772

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

Pydantic 安全漏洞

Pydantic is a library in the Pydantic open source. Data validation can be performed using Python type hints. A security vulnerability exists in Pydantic versions prior to 2.4.0, 1.10.13, which stems from a vulnerability that allows remote attackers to cause a denial of service via a crafted email...

PT-2024-5856

Name of the Vulnerable Software and Affected Versions Pydantic versions prior to 2.4.0 Pydantic versions prior to 1.10.13 Description The issue is related to the use of regular expressions in the Pydantic library, which can lead to a denial of service when exploited by a remote attacker. This can...

GHSA-2V42-XP3J-47M4 Xuxueli xxl-job template injection vulnerability

A vulnerability classified as problematic was found in Xuxueli xxl-job version 2.4.0. This vulnerability affects the function deserialize of the file com/xxl/job/core/util/JdkSerializeTool.java of the component Template Handler. The manipulation leads to injection. The exploit has been disclosed ...

WordPress Platinum SEO plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Platinum SEO versions = 2.4.0...

WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin WPC Badge Management for WooCommerce versions = 2.4.0...

WordPress WPC Badge Management for WooCommerce Plugin <= 2.4.0 is vulnerable to Broken Access Control

Software WPC Badge Management for WooCommerce Type Plugin Vulnerable versions = 2.4.0 Fixed in 2.4.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30537 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3694b8328f78 Credits Abdi...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 2.4.0, which stems from a segmentation error in ecmagetobjecttype at . /jerry-core/ecma/base/ecma-helpers.c:238:58 has a segmentation error...

CVE-2024-29489

CVE-2024-29489 affects JerryScript 2.4.0, with a segmentation fault in ecma_get_object_type (jerry-core/ecma/base/ecma-helpers.c:238:58). The description and connected documents confirm the vulnerable component/function but do not provide public details on exploitation, affected products beyond J...

PT-2024-22923

Name of the Vulnerable Software and Affected Versions Jerryscript version 2.4.0 Description The issue is related to a SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in the ecma get object type function. Recommendations For Jerryscript version 2.4.0, at the moment, there is no information...

CVE-2024-29489

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

CVE-2024-29489

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7

CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7. A patched version of the package is available...

CVE-2024-2286

The Sky Addons for Elementor Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link URL value in all versions up to, and including, 2.4.0 due to insufficient input...

PT-2024-19590 · WordPress · Sky Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Sky Addons for Elementor plugin for WordPress versions up to, and including, 2.4.0 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes,...

CVE-2024-27317

In Pulsar Functions Worker, authenticated users can upload functions in jar or nar files. These files, essentially zip files, are extracted by the Functions Worker. However, if a malicious file is uploaded, it could exploit a directory traversal vulnerability. This occurs when the filenames in th...

CVE-2024-27317 Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification

In Pulsar Functions Worker, authenticated users can upload functions in jar or nar files. These files, essentially zip files, are extracted by the Functions Worker. However, if a malicious file is uploaded, it could exploit a directory traversal vulnerability. This occurs when the filenames in th...

CVE-2024-27135 Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution

Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the sandboxes designated for running user-provided functions. This vulnerability also applies to the Pulsar Broker when it is...

PT-2024-35162

Name of the Vulnerable Software and Affected Versions libosdp versions prior to 2.4.0 Description The issue arises from a null pointer dereference in the osdp reply name function at ospd common.c. Any reply id between REPLY ACK and REPLY XRD is considered valid, but the names array does not decla...

BIT-TENSORFLOW-2020-15265 Segfault in Tensorflow

In Tensorflow before version 2.4.0, an attacker can pass an invalid axis value to tf.quantization.quantizeanddequantize. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dimsize only does a DCHECK to validate the argument and th...