Malicious code in Be.Vlaaոderen.Basisregіsters.AspNetCore.Mvc.Logging (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4223 Malicious code in Be.Vlaaոderen.Basisregіsters.AspNetCore.Mvc.Logging (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaaոderen.Basisregіstеrs.AspNetCore.Mvc.Lоgging (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-6104

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information. Mitigation Mitigation for this issue is either not available or the currently...

AZL-42880 CVE-2024-6104 affecting package cert-manager for versions less than 1.12.12-3

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

SUSE CVE-2024-38552

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer...

PT-2024-33642 · WordPress · Widget Bundle

Name of the Vulnerable Software and Affected Versions: Widget Bundle WordPress plugin versions prior to 2.0.1 Description: The issue is related to the lack of CSRF checks when logging widgets. This could allow attackers to make logged-in admins enable or disable widgets via a CSRF attack...

WordPress affiliate-toolkit Plugin <= 3.4.4 is vulnerable to Sensitive Data Exposure

Software affiliate-toolkit Type Plugin Vulnerable versions = 3.4.4 Fixed in 3.4.5 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-37205 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 304bb1692328 Credits Joshua...

DEBIAN-CVE-2024-38552

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the number of transfer...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692 Usage: go run hfs.go -h !1https://git...

PT-2024-32264

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified where the DMCUB can intermittently take longer than expected to process commands, leading to a potential race condition. This issu...

CVE-2024-5976 SourceCodester Employee and Visitor Gate Pass Logging System log_employee sql injection

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. Affected is the function logemployee of the file /classes/Master.php?f=logemployee. The manipulation of the argument employeecode leads to sql injection. It is possib...

CVE-2024-5976 SourceCodester Employee and Visitor Gate Pass Logging System log_employee sql injection

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. Affected is the function logemployee of the file /classes/Master.php?f=logemployee. The manipulation of the argument employeecode leads to sql injection. It is possib...

CVE-2024-5976

SourceCodester Employee and Visitor Gate Pass Logging System 1.0 is affected by CVE-2024-5976 in the function log_employee (file /classes/Master.php?f=log_employee). The vulnerability arises from SQL injection caused by manipulating the employee_code argument, and the issue can be exploited remot...

CVE-2024-5897

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=logvisitor. The manipulation of the argument name leads to cross site...

CVE-2024-5896

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-5897 SourceCodester Employee and Visitor Gate Pass Logging System cross site scripting

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=logvisitor. The manipulation of the argument name leads to cross site...

CVE-2024-5897

SourceCodester Employee and Visitor Gate Pass Logging System 1.0 is affected by a cross-site scripting (XSS) vulnerability in /classes/Master.php?f=log_visitor (or log visitor). The vulnerability arises from manipulation of the name parameter, enabling remote exploitation and is publicly disclose...

CVE-2024-5897 SourceCodester Employee and Visitor Gate Pass Logging System cross site scripting

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=logvisitor. The manipulation of the argument name leads to cross site...

CVE-2024-5896 SourceCodester Employee and Visitor Gate Pass Logging System save_users sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...