gogs -- Multiple vulnerabilities

[email protected] reports: CVE-2024-44625: Directory Traversal via the editFilePost function of internal/route/repo/editor.go. CVE-2024-39933: Gogs allows argument injection during the tagging of a new release. CVE-2024-39932: Gogs allows argument injection during the previewing of changes...

Ivanti Policy Secure 22.7R1.2 (Build 1485) Multiple Vulnerabilities

The version of Ivanti Policy Secure installed on the remote host is prior to 22.7R1.2 Build 1485. It is, therefore, affected by multiple vulnerabilities as referenced in the CVE-2024-11005 advisory. - A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy...

CVE-2024-39710

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39711

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39712

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39710

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38656

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38656

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38655

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38655

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39712

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39710

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39710

CVE-2024-39710 involves argument injection in Ivanti Connect Secure (pre-22.7R2.1) and Ivanti Policy Secure (pre-22.7R1.1). An authenticated admin can exploit the web interfaces to achieve remote code execution. The issue affects the web-facing components and is reported with a 9.1/CRITICAL CVSS....

CVE-2024-38656

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39710

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39711

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39711

CVE-2024-39711 describes an argument-injection vulnerability in Ivanti Connect Secure prior to 22.7R2.1 and 9.1R18.7, and Ivanti Policy Secure prior to 22.7R1.1. A remote, authenticated attacker with admin privileges can achieve remote code execution via the administrative web interface. The issu...

CVE-2024-38655

CVE-2024-38655 is an argument-injection flaw in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) that allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected: ICS before 22.7R2.1 (not applicable to 9.1Rx) and IPS before 22.7R1.1 (not appli...

CVE-2024-38655

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Arbitrary Argument Injection

Overview laravel/framework is a PHP framework for web artisans. Affected versions of this package are vulnerable to Arbitrary Argument Injection when the registerargcargv directive is set to on. An attacker can manipulate the application environment by sending a specially crafted query string...