6430 matches found
UBUNTU-CVE-2024-37148
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can exploit a SQL injection vulnerability in some AJAX scripts to alter another user account data and take control of it. Upgrad...
CVE-2024-37149 GLPI allows remote code execution through the plugin loader
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated technician user can upload a malicious PHP script and hijack the plugin loader to execute this malicious script. Upgrade to 10.0.16...
UBUNTU-CVE-2024-37147
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to 10.0.16...
CVE-2024-37147
GLPI (open-source IT asset/ITIL Service Desk) has a vulnerability (CVE-2024-37147) where an authenticated user can attach a document to any item even without write access. Connected PTSecurity entries describe affected versions as prior to 10.0.16 and indicate the issue stems from improper access...
EUVD-2024-36465
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to 10.0.16...
DoS (Denial of Service) org.apache.commons:commons-compress Dependency in Confluence Data Center and Server
This High severity org.apache.commons:commons-compress Dependency vulnerability was introduced in versions 7.19.23, 8.5.10, 8.9.2 of Confluence Data Center and Server. This org.apache.commons:commons-compress Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
DoS (Denial of Service) org.apache.commons:commons-compress Dependency in Confluence Data Center and Server
This High severity org.apache.commons:commons-compress Dependency vulnerability was introduced in versions 7.19.23, 8.5.10, 8.9.2 of Confluence Data Center and Server. This org.apache.commons:commons-compress Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
Exploit for Race Condition in Openbsd Openssh
Vulnerability Description CVE-2024-6387: A vulnerability in...
Cross-site Scripting (XSS)
typo3/cms is vulnerable to Cross-site Scripting XSS. The vulnerability is due to failing to properly encode user input in online media asset rendering for .youtube and .vimeo files, requiring a valid backend user account or write access on the server system to exploit...
ThroughTek P2P SDK Cleartext Transmission of Sensitive Information (CVE-2021-32934)
ThroughTek supplies multiple original equipment manufacturers of IP cameras & recorders with P2P connections as part of its cloud platform. Successful exploitation of this vulnerability could permit unauthorized access to sensitive information, such as camera audio/video feeds. This plugin only...
Malicious code in hide-asset_logs (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asset-uploader (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6704 Malicious code in asset-uploader (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asset-symlink (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6703 Malicious code in asset-symlink (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6702 Malicious code in asset-pipeline_i18n (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asset-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6701 Malicious code in asset-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...