Astra Linux - уязвимость в openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Security. The supported versions affected by this vulnerability are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,...

BIT-JAVA-2024-21131

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

EUVD-2026-19861

Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit...

CVE-2026-39351 Frappe allows unrestricted Doctype access via API exploit

Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0, Frappe allows unrestricted Doctype access via API exploit...

CVE-2026-39351

CVE-2026-39351 affects Frappe prior to versions 16.14.0 and 15.104.0, where unrestricted Doctype access via the API is possible. The root cause is not elaborated in the provided documents beyond the unrestricted Doctype access vector. Potential impact includes unauthorized access to Doctype data ...

CVE-2021-22202

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API...

CVE-2016-10843

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...

CVE-2019-11185

The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrary file upload is achieved by using a non-blacklisted executable file extension in conjunction with a whitelisted file...

CVE-2024-2771

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up to, and including, 5.1.16. This makes ...

EUVD-2021-11134

Malware in sbrugna...

EUVD-2021-23961

Malware in sbrugna...

EUVD-2021-19751

Malware in sbrugna...

EUVD-2021-13278

Malware in sbrugna...

EUVD-2017-3697

Malware in sbrugna...

EUVD-2021-19654

Malware in sbrugna...

EUVD-2020-18708

Malware in sbrugna...

EUVD-2018-11233

Malware in sbrugna...

EUVD-2019-17716

Malware in sbrugna...

EUVD-2019-10599

Malware in sbrugna...

EUVD-2018-2004

Malware in sbrugna...