Lucene search
+L

3568 matches found

osv_ubuntu
osv_ubuntu
•added 2024/03/18 7:15 p.m.•19 views

UBUNTU-CVE-2023-41334

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a...

8.4CVSS7.8AI score0.01134EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/03/18 12:00 a.m.•21 views

Astropy Security Breach

Astropy is a Python astronomy project designed to promote interoperability between Python astronomy packages. A security vulnerability exists in Astropy version 5.3.2, which stems from an improper input validation issue in the function TranformGraph.todotgraph, leading to a remote code execution...

8.4CVSS8.1AI score0.01134EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2024/03/15 12:00 a.m.•33 views

SUSE SLES12 Security Update : zabbix (SUSE-SU-2024:0862-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0862-1 advisory. - CVE-2024-22119: Fixed ability to run XSS in graph item names bsc1219775. Tenable has extracted the preceding description block directly fr...

5.5CVSS6.1AI score0.00735EPSS
SaveExploits1References4
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•30 views

[SECURITY] Fedora 40 Update: dirgra-0.4-12.fc40

Simple Directed Graph Implementation...

8.8CVSS6.9AI score0.02352EPSS
SaveExploits3
osv_bit
osv_bit
•added 2024/03/06 11:16 a.m.•99 views

BIT-TENSORFLOW-2021-41217 Null pointer exception when `Exit` node is not preceded by `Enter` op

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

5.5CVSS5.6AI score0.00187EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2024/03/04 11:30 a.m.•87 views

BloodHound - Six Degrees Of Domain Admin

BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound uses graph...

7.4AI score
SaveExploits0References9
PyPA
PyPA
•added 2024/02/29 11:15 a.m.•63 views

PYSEC-2024-245

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk...

5.9CVSS6.9AI score0.00345EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2024/02/27 9:45 a.m.•39 views

Information Disclosure

microsoft/microsoft-graph-core is vulnerable to Information Disclosure. The vulnerability is due to the inclusion of test code that enables the use of the phpInfo function, specifically through the GetPhpInfo.php script, which can expose sensitive system information if the server is misconfigured...

5.4CVSS6.9AI score0.02203EPSS
SaveExploits0References10Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/27 12:00 a.m.•16 views

PT-2024-40640 · Git +1 · Igraph

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: igraph dl yylex, igraph dl yyparse,...

7.4AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•2 views

CVE-2021-46926: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk...

5.5CVSS5.7AI score0.00212EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/02/09 9:15 a.m.•71 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS6.9AI score0.00735EPSS
SaveExploits1
NVD
NVD
•added 2024/02/09 9:15 a.m.•32 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.4AI score0.00735EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/02/09 9:15 a.m.•26 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.4CVSS6.9AI score0.00735EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2024/02/09 9:15 a.m.•8 views

DEBIAN-CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.4CVSS5.5AI score0.00735EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/09 9:15 a.m.•24 views

Input validation

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

4.9CVSS7.4AI score0.00735EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2024/02/09 9:15 a.m.•33 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS6.1AI score0.00735EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2024/02/09 9:15 a.m.•12 views

UBUNTU-CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.8AI score0.00735EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/09 8:26 a.m.•62 views

CVE-2024-22119 Stored XSS in graph items select form

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.7AI score0.00735EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/02/09 8:26 a.m.•73 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS7.2AI score0.00735EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2024/02/09 8:26 a.m.•9 views

CVE-2024-22119 Stored XSS in graph items select form

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.7AI score0.00735EPSS
SaveExploits1References2
Rows per page
Query Builder