a-data-processing (0.0.1), ab-data-processing (0.0.1) +430 more potentially affected by CVE-2024-28088 via langchain (>=0.0.27, <=0.1.10)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.1.0 and more Source cves: CVE-2024-28088 Source advisory: OSV:PYSEC-2024-43...

PT-2024-20551

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 3.0.4 Apache Superset versions 3.1.0 through 3.1.0 Description The issue is related to the improper parsing of nested SQL statements on SQLLab, allowing authenticated users to surpass their data authorization...

CVE-2024-22917

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

Sql injection

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2024-22917

The Kashipara Dynamic Lab Management System (version V1.0 ) is susceptible to a SQL injection vulnerability. This flaw allows a remote attacker to execute arbitrary code by providing a specially crafted script. While the vulnerability is confirmed across multiple sources, there is currently no in...

CVE-2024-22917

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

Kashipara Dynamic Lab Management System SQL Injection Vulnerability

Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System version V1.0, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via specially...

CVE-2024-22917: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2024-22917

SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 324596281 High CVE-2024-1938: Type Confusion in V8. Reported by 5f46f4ee2e17957ba7b39897fb376be8 on 2024-02-11 323694592 High CVE-2024-1939: Type Confusion in V8. Reported by Bohan Liu @P4nda20371774 of Tencent Security Xuanwu Lab on...

PT-2024-19612 · Unknown · Dynamic Lab Management System Project In Php

Name of the Vulnerable Software and Affected Versions: Dynamic Lab Management System Project in PHP version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script. This is a result of a SQL injection vulnerability. Recommendations: For Dynamic Lab...

Tosibox Key Service 3.3.0 Local Privilege Escalation

Summary TOSIBOX® SoftKey is a software that enables a secure connection between your computer and one or more TOSIBOX® Nodes, giving you full visibility and control over the network devices connected to the Node. Description The application suffers from an unquoted search path issue impacting the...

CVE-2024-1748

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

CVE-2024-1748

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

CVE-2024-1748 van_der_Schaar LAB AutoPrognosis Release Note load_model_from_file deserialization

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

CVE-2024-1748

CVE-2024-1748 affects van_der_Schaar LAB AutoPrognosis 0.1.21, specifically the Release Note Handler's function load_model_from_file , where input deserialization leads to a vulnerability. Descriptions across sources indicate remote initiation with high impact on confidentiality, integrity, and a...

CVE-2024-1748: Deserialization of Untrusted Data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

Dell E-Lab Navigator Security Bypass Vulnerability

Dell E-Lab Navigator is an online query tool from Dell USA. A security bypass vulnerability exists in Dell E-Lab Navigator versions 3.1.9 and 3.2.0, which can be exploited by an attacker to manipulate the appearance of an e-mail message, potentially spoofing recipients and posing reputational and...

fairtool (0.2.1), nomad-lab (1.2.1) +2 more potentially affected by CVE-2024-23346 via pymatgen (2023.2.28)

pymatgen PYPI version 2023.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - fairtool 0.2.1 - nomad-lab 1.2.1 - nomad-material-processing =0.0.2, =0.0.1, =0.0.2 Source cves: CVE-2024-23346 Source advisory:...

fairtool (0.2.1), nomad-lab (1.2.1) +2 more potentially affected by CVE-2024-23346 via pymatgen (2023.2.28)

pymatgen PYPI version 2023.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - fairtool 0.2.1 - nomad-lab 1.2.1 - nomad-material-processing =0.0.2, =0.0.1, =0.0.2 Source cves: CVE-2024-23346 Source advisory:...