Lucene search
+L

12098 matches found

osv_ghsa
osv_ghsa
•added 2024/06/07 7:55 p.m.•20 views

GHSA-6487-3QVG-8PX9 TYPO3 Information Disclosure in Install Tool

The Install Tool exposes the current TYPO3 version number to non-authenticated users...

5.3CVSS7AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/06/07 7:55 p.m.•28 views

TYPO3 Information Disclosure in Install Tool

The Install Tool exposes the current TYPO3 version number to non-authenticated users...

7AI score
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2024/06/07 7:52 p.m.•33 views

GHSA-F777-F784-36GM TYPO3 Security Misconfiguration in Install Tool Cookie

It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool...

8.1CVSS6.6AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/06/07 7:52 p.m.•26 views

TYPO3 Security Misconfiguration in Install Tool Cookie

It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool...

6.6AI score
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•33 views

Fedora: Security Advisory (FEDORA-2024-680b8ba54e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•13 views

Fedora: Security Advisory for rust-uu_cat (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•16 views

Fedora: Security Advisory for rust-uu_rm (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•13 views

Fedora: Security Advisory for rust-uu_factor (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•37 views

Fedora: Security Advisory for rust-cargo-insta (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•8 views

Fedora: Security Advisory for rust-uu_cp (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•10 views

Fedora: Security Advisory for rust-leb128 (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•37 views

Fedora: Security Advisory for rust-dotenvy (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•21 views

Fedora: Security Advisory for rust-varlink_generator (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•43 views

Fedora: Security Advisory for rust-uu_link (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/07 12:00 a.m.•4 views

PT-2024-40111

Name of the Vulnerable Software and Affected Versions: TYPO3 affected versions not specified Description: The issue concerns the exposure of the current TYPO3 version number to non-authenticated users through the Install Tool. Recommendations: At the moment, there is no information about a newer...

5.3CVSS5.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/06/07 12:00 a.m.•5 views

PT-2024-40263

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security issue has been found where cookies created in the Install Tool are not properly secured to only be submitted via HTTP. This, combined with other issues like cross-site...

8.1CVSS5.6AI score
SaveExploits0References7
osv_cve
osv_cve
•added 2024/06/06 7:16 p.m.•22 views

CVE-2024-4320

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

9.8CVSS6.5AI score0.34354EPSS
SaveExploits1References1
Mend
Mend
•added 2024/06/06 3:28 p.m.•8 views

CVE-2024-37150

An issue in .npmrc support in Deno 1.44.0 was discovered where Deno would send .npmrc credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private...

7.6CVSS0.0042EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/06/06 2:15 a.m.•18 views

CVE-2024-4942

The Custom Dash plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

4.8CVSS5.9AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•19 views

PT-2024-30366 · Unknown · Parisneo/Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui affected versions not specified Description: A remote code execution RCE vulnerability exists in the '/install extension' endpoint of the parisneo/lollms-webui application. The vulnerability arises due to improper handli...

9.8CVSS9.9AI score0.34354EPSS
SaveExploits1References9
Rows per page
Query Builder