827 matches found
CVE-2024-28100
eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...
CVE-2024-28100 Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftw
eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...
TYPO3 News Module SQL Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TYPO3 News Module SQL Injection', 'Description' = %q This module exploits a SQL Injection vulnerability In TYPO3 NewsController.php in the news...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF
Summary Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF Vulnerability Details CVEID:CVE-2023-3618 DESCRIPTION: libtiff is vulnerable to a denial of service, caused by a segmentation fault in the Fax3Encode function at libtiff/tiffax3.c when...
Joomla! URL Validation Vulnerability (20240801)
Joomla! is prone to an inadequate validation of internal URLs vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla! 安全漏洞
Joomla! is a free, open-source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! versions 3.4.6 through 3.10.16-elts, 4.0.0 through 4.4.6, and 5.0.0 through 5.1.2, which stems from an insufficient URL validation, which results in an invalid check to see ...
CVE-2024-25633
eLabFTW is an open source electronic lab notebook for research labs. In an eLabFTW system, one can configure who is allowed to create new user accounts. A vulnerability has been found starting in version 4.4.0 and prior to version 5.0.0 that allows regular users to create new, validated accounts ...
CVE-2024-25633 In eLabFTW, if administrators can create users, users can too
eLabFTW is an open source electronic lab notebook for research labs. In an eLabFTW system, one can configure who is allowed to create new user accounts. A vulnerability has been found starting in version 4.4.0 and prior to version 5.0.0 that allows regular users to create new, validated accounts ...
PT-2024-6098 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions 5.0.0 through 7.0.0rc2 Description: The issue is related to the configuration of SMS notifications in Zabbix, where an AT command injection occurs due to the lack of validation of the Number field. This allows an attacker to...
CVE-2024-28972
Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure...
CVE-2024-28972
Dell InsightIQ 5.0.0 is affected by a use of a broken or risky cryptographic algorithm that could be exploited by an unauthenticated remote attacker to cause information disclosure. The vulnerability is documented across multiple sources indicating affected versions include 5.0.0 and prior to 5.0...
CVE-2024-28972
Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure...
CVE-2024-28972
Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure...
Malicious code in melio-platform-api-client (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 rubygems as malicious. It is considered malicious because: -...
Huawei openGauss 安全漏洞
Huawei openGauss is an open source relational database management system from Huawei China. A security vulnerability exists in Huawei openGauss version 5.0.0, which originates from a vulnerability that could allow a local attacker to cause a denial of service by modifying table properties...
Joomla core 4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated Improper ACL for backend profile view vulnerability
Unauthenticated Improper ACL for backend profile view vulnerability discovered by ? in WordPress Core Joomla versions 4.0.0-4.4.6,5.0.0-5.1.2...
Joomla! Multiple XSS Vulnerabilities (20240703, 20240704)
Joomla! is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2024-5623 · Dell · Dell Insightiq
Name of the Vulnerable Software and Affected Versions: Dell InsightIQ version 5.0.0 Description: The issue is related to the use of a broken or risky cryptographic algorithm, which could be exploited by an unauthenticated remote attacker to disclose protected information. Recommendations: For Del...
CVE-2024-35537
TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption...
