108 matches found
Nautobot 安全漏洞
Nautobot is a web automation platform by the individual developers of Nautobot. A security vulnerability exists in Nautobot versions prior to 2.4.10 and prior to 1.6.32, which stems from a misconfigured Jinja2 template that could lead to data leakage or tampering...
Nautobot 信息泄露漏洞
Nautobot is a web automation platform by the individual developer of Nautobot. An information disclosure vulnerability exists in Nautobot versions prior to v2.4.10 and v1.6.32, which stems from not enforcing user authentication and could lead to the retrieval of files by an anonymous user...
CVE-2021-24660
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode...
CVE-2021-32823
In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit. In combination with...
CVE-2025-30884
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bit Apps Bit Integrations bit-integrations allows Phishing.This issue affects Bit Integrations: from n/a through = 2.4.10...
WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Bit Integrations versions = 2.4.10...
mod_auth_openidc security update
2.4.10-1 Rebase to 2.4.10 version improves state cookies piling up problem Resolves: RHEL-32450 Race condition in modauthopenidc filecache Resolves: RHEL-25422 modauthopenidc: DoS when using OIDCSessionType client-cookie and manipulating cookies CVE-2024-24814...
GHSA-HF59-7RWQ-785M In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.
Impact What kind of vulnerability is it? Who is impacted? In certain very specific situations, it was possible for the policies of an update action to be skipped. This occurred only on "empty" update actions no changing fields, and would allow their hooks side effects to be performed when they...
AshPostgres 安全漏洞
AshPostgres is an Ash Framework open source a PostgreSQL data layer for the Ash Framework. A security vulnerability exists in AshPostgres versions prior to 2.0.0 through 2.4.10, which stems from a policy that may be skipped for update operations under certain circumstances, resulting in the...
CVE-2024-35235 affecting package cups for versions less than 2.4.10-1
CVE-2024-35235 affecting package cups for versions less than 2.4.10-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-32324 affecting package cups for versions less than 2.4.10-1
CVE-2023-32324 affecting package cups for versions less than 2.4.10-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-4504 affecting package cups for versions less than 2.4.10-1
CVE-2023-4504 affecting package cups for versions less than 2.4.10-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-34241 affecting package cups for versions less than 2.4.10-1
CVE-2023-34241 affecting package cups for versions less than 2.4.10-1. An upgraded version of the package is available that resolves this issue...
WordPress plugin Woody ad snippets cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-26705 · Unknown · Woody Ad Snippets
Name of the Vulnerable Software and Affected Versions: Woody ad snippets versions n/a through 2.4.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. No information is...
Open5GS 访问控制错误漏洞
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. An Access Control Error vulnerability exists in Open5GS version 2.4.10 and earlier, which stems from a lack of authentication, and can be exploited by an attacker to send an HTTP request to a...
Pouch has a container escape vulnerability
Pouch is a lightweight container technology that helps Ali deliver internal business faster while improving the utilization of physical resources in hyperscale data centers. Pouch has a container escape vulnerability that can be exploited by an attacker to write arbitrary files on the container's...
AZL-37098 CVE-2023-32324 affecting package cups for versions less than 2.4.10-1
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
