5872 matches found
Duplicate Advisory: .NET Framework Remote Code Execution Vulnerability.
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2c7v-qcjp-4mg2. This link is maintained to preserve external references. Original Description .NET Framework Remote Code Execution Vulnerability...
GHSA-HH82-3PMQ-7FRP vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-FX2C-96VJ-985V vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-FX2C-96VJ-985V vulnerabilities
Vulnerabilities for packages: stargate...
GHSA-4GG5-VX3J-XWC7 vulnerabilities
Vulnerabilities for packages: druid, trino, celeborn...
GHSA-2QJP-425J-52J9 vulnerabilities
Vulnerabilities for packages: ctop...
Nextcloud Server < 23.0.11, 24.x < 24.0.7 DoS Vulnerability (GHSA-4gm7-j7wg-m4fx)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nextcloud Server < 24.0.7, 25.x < 25.0.1 Improper Access Control Vulnerability (GHSA-9mh6-cph8-772c)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Malicious code in ipcode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb106e4f5f5d2d56192a137717db9c8725f3ec3c4ee2604a420c6e5056db9761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
XWiki 13.1RC1 < 13.10.8, 14.x < 14.4.3, 14.5.x < 14.6 Plaintext Password Storage Vulnerability (GHSA-q2hm-2h45-v5g3)
Xwiki is prone to a plaintext password storage vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
Nextcloud Server < 22.2.10, 23.0.x < 23.0.7, 24.0.x < 24.0.3 DoS Vulnerability (GHSA-6w9f-jgjx-4vj6)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-599V-W48H-RJRM
creationtimestamp| type| source ---|---|--- 2022-11-24 00:14:06+00:00| seen| https://t.me/cibsecurity/53461...
XWiki 6.4-milestone-2 < 13.10.7, 14.x < 14.4.2 Eval Injection Vulnerability (GHSA-5j7g-cf6r-g2h7)
Xwiki is prone to an improper neutralization of directives in dynamically evaluated code eval injection vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
XWiki 12.10.11 < 13.10.8, 14.x < 14.4.3, 14.5.x < 14.6 Exposure of Sensitive Information Vulnerability (GHSA-p2x4-6ghr-6vmq)
Xwiki is prone to an exposure of sensitive information vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki...
XWiki 11.7RC1 < 13.10.7, 14.x < 14.4.2 Missing Authorization Vulnerability (GHSA-2gj2-vj98-j2qq)
Xwiki is prone to a missing authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
@1doc3/hermes-chat (>=0.0.0, <=0.4.74), @1doc3/synapse-wizard (>=0.0.0, <=0.5.119) +326 more potentially affected by unknown CVE via sweetalert2 (>=9.17.4, <=11.22.3)
sweetalert2 NPM version =9.17.4, =0.0.0, =0.0.0, =2.31.0, =0.0.1-beta.1, =0.1.1, =1.0.1, =1.0.0, =0.0.9, =0.0.1, =0.3.73, =0.0.4, =0.0.4, =1.0.0, =1.0.17, =1.2.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PG98-6V7F-2XFV...
@bcwdev/quickvue (1.0.15), @bnsights-test/test-admin-portal (>=0.0.4, <=0.0.147) +41 more potentially affected by unknown CVE via sweetalert2 (>=11.4.14, <=11.22.3)
sweetalert2 NPM version =11.4.14, =0.0.4, =0.0.4, =1.0.0, =1.0.110, =0.0.0-20240903040200, =1.10.0, =15.2.16, =1.2.29, =1.8.94, =3.0.0, =3.0.30, =1.0.1, =1.0.1, =1.1.16, =1.6.22 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QQ6H-5G6J-Q3CM...
Malicious code in vue2-wangwanqi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0f6b0b8d424e61ac14355f44928693d1cf0799caf5b837f944160470afc6fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...