SUSE CVE-2024-23793

The file upload feature in OTRS and OTRS Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl...

CVE-2024-30162

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\toolbar::addPlugin method. This method handles uploaded ZIP files that are extracted into the...

CVE-2024-30163

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

CVE-2024-30163

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

Invision Community Security Breach

Invision Community is a software for designing and developing mobile application UI from Invision Inc. in the United States. A security vulnerability exists in Invision Community 4.7.16 and earlier versions, which is caused by a failure to properly validate the contents of an uploaded ZIP file wh...

CVE-2024-30162: Insufficient Verification of Data Authenticity

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\toolbar::addPlugin method. This method handles uploaded ZIP files that are extracted into the...

CVE-2024-30162

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\toolbar::addPlugin method. This method handles uploaded ZIP files that are extracted into the...

CVE-2024-30163

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

Invision Community Security Breach

Invision Community is a software for designing and developing mobile application UI from Invision USA. A security vulnerability exists in Invision Community versions prior to 4.7.16 that stems from the application failing to properly clean up request parameters, which can be exploited by an...

CVE-2024-30163

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

CVE-2024-30162

Invision Community versions 4.7.16 and prior are vulnerable to remote code execution (RCE) via the IPS e_core ools esin oolbar.php (or applications/core/modules/admin/editor/toolbar.php) script. The flaw exists in the _toolbar::addPlugin() method, which fails to properly verify the contents of u...

CVE-2024-30163: Improper Neutralization of Special Elements used in an SQL Command

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

CVE-2024-30162

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\toolbar::addPlugin method. This method handles uploaded ZIP files that are extracted into the...

CVE-2024-30163

Summary (CVE-2024-30163): IPS Community Suite prior to 4.7.16 is affected by an unauthenticated SQL injection in the store.php path, specifically IPS\nexus\modules\front\store_store::_categoryView() where input passed via filter is not sanitized before SQL execution. This allows blind SQL injecti...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: OSV:GHSA-3HJH-JH2H-VRG6...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: GHSA-3HJH-JH2H-VRG6...

GHSA-3HJH-JH2H-VRG6 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +353 more potentially affected by CVE-2024-3095 via langchain-community (>=0.0.1, <=0.2.7)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-3095 Source advisory: GHSA-Q25C-C977-4CMH...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +353 more potentially affected by CVE-2024-3095 via langchain-community (>=0.0.1, <=0.2.7)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-3095 Source advisory: OSV:GHSA-Q25C-C977-4CMH...

CVE-2024-23793

The file upload feature in OTRS and OTRS Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl...