10558 matches found
GHSA-RJ98-CRF4-G69W pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
pgAdmin prior to version 8.4 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is...
CVE-2024-2044 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4
pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...
CVE-2024-2044
CVE-2024-2044 affects pgAdmin4
CVE-2024-20328 affecting package clamav for versions less than 0.105.2-5
CVE-2024-20328 affecting package clamav for versions less than 0.105.2-5. A patched version of the package is available...
BIT-TENSORFLOW-2022-35969 `CHECK` fail in `Conv2DBackpropInput` in TensorFlow
TensorFlow is an open source platform for machine learning. The implementation of Conv2DBackpropInput requires inputsizes to be 4-dimensional. Otherwise, it gives a CHECK failure which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...
BIT-NODE-2022-21824
Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...
BIT-PHPMYADMIN-2020-10803
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results in tblgetfield.php and libraries/classes/Display/Results.php. The attacker must be able to insert...
BIT-DRUPAL-2021-41164 Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter ACF module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result ...
BIT-DRUPAL-2021-41165 HTML comments vulnerability allowing to execute JavaScript code
CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...
RHEL 8 : squid:4 (RHSA-2024:1066)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1066 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: denial of service in...
pgproto3 SQL Injection via Protocol Message Size Overflow
Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. Patches The problem is resolved in v2.3.3...
theswisscollector.com Improper Access Control vulnerability OBB-3864599
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ssir.org Improper Access Control vulnerability OBB-3864542
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-0155
creationtimestamp| type| source ---|---|--- 2024-03-04 14:31:53+00:00| seen| https://t.me/ctinow/199279 2024-03-04 14:31:58+00:00| seen| https://t.me/ctinow/199284...
tsvspeyer.de Cross Site Scripting vulnerability OBB-3864470
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-1070
creationtimestamp| type| source ---|---|--- 2024-03-04 06:42:06+00:00| seen| https://t.me/ctinow/199021...
CVE-2024-2155
creationtimestamp| type| source ---|---|--- 2024-03-04 02:21:37+00:00| seen| https://t.me/ctinow/198953 2024-03-04 02:26:54+00:00| seen| https://t.me/ctinow/198958...
WordPress GenerateBlocks Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure
Software GenerateBlocks Type Plugin Vulnerable versions = 1.8.2 Fixed in 1.8.3 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1452 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 17b91c2bc914 Credits Webbernaut Required privile...
WordPress WP Show Posts Plugin <= 1.1.4 is vulnerable to Sensitive Data Exposure
Software WP Show Posts Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1479 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 82cf115492e1 Credits Webbernaut Required privileg...
