5917 matches found
SUSE CVE-2019-18658
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
SUSE CVE-2019-25018
In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on the client side. NOTE: MIT...
SA40005 - Details on fixes for OpenSSL Heartbleed issue (CVE-2014-0160)
Last Modified Date Aug 24, 2026 12:35:24 AM...
SA45476 - Client Side Desync Attack (Informational)
Last Modified Date Aug 24, 2026 12:35:08 AM...
@savvycodes/openstad-react-admin (>=0.31.1, <=0.40.1-alpha.3), muffin-admin (>=1.21.1, <=1.29.0) +4 more potentially affected by CVE-2023-25572 via react-admin (>=3.9.5, <=3.19.11)
react-admin NPM version =3.9.5, =0.31.1, =1.21.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...
CVE-2023-22664
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:...
CVE-2023-22664 BIG-IP HTTP/2 profile vulnerability
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:...
CVE-2023-24610
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting...
CVE-2023-24610
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting...
Design/Logic Flaw
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting...
PT-2023-7458 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions 16.1.x through 16.1.3.2 BIG-IP versions 17.0.x through 17.0.0.1 BIG-IP SPK versions 1.6.0 and later Description: The issue is related to an uncontrolled resource consumption when handling requests. This can be exploited by a...
CVE-2023-24610
CVE-2023-24610 affects NOSH Chartingsystem (NOSH 4a5cfdb). A remote authenticated user can trigger PHP arbitrary code execution via the “practice logo” upload feature after bypassing client-side checks. Impact per sources includes potential exposure of Protected Health Information due to health-c...
CVE-2023-0581
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
CVE-2023-0581
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
Design/Logic Flaw
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...
CVE-2023-0581
CVE-2023-0581 affects the PrivateContent WordPress plugin (up to version 8.4.3). Root cause: login protection relies on client-side validation to determine blocklisted IPs, allowing unauthenticated bypass of login restrictions. Impact is the potential to brute-force login bypass. Mitigation: upda...
PrivateContent < 8.4.4 - Brute Force Protection Bypass
The plugin checks whether an IP is blocked or not via client-side validation, allowing attackers to bypass such protection via crafted requests...