231557 matches found
CVE-2023-22649
Summary of CVE-2023-22649 (Rancher Audit Log leak) A vulnerability in Rancher Audit Logging may leak sensitive data into audit logs. Affected deployments are those using the opt-in Audit Logging feature with AUDIT_LEVEL set to 1 or higher. The issue could expose headers, credentials, and other se...
Exploit for Code Injection in Sqlpad
CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a...
CVE-2023-45872
Qt CVE-2023-45872 affects Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. If a QML image references an image whose content is not yet known, the code may assume it is an SVG document, leading to a denial-of-service via application crash when the image is not actually SVG. Remediation per P...
CVE-2023-37154
CVE-2023-37154 affects Nagios nagios-plugins 2.4.5, where check_by_ssh allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS}. The issue is noted as categorized both as fixed in commit e8810de and as intended behavior; exploitation details are not pr...
CVE-2023-45359
CVE-2023-45359 affects MediaWiki’s Vector Skin: vector-toc-toggle-button-label is not escaped, allowing markup in the line parameter. Affected: Vector Skin for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. Descriptions in connected docs do not provide exploitation details or a confirmed patch...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2559)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-36325
CVE-2023-36325 affects i2p before 2.3.0 (Java). A correlation attack during a tunneled, replayed message with a behavior discrepancy can de-anonymize the public IPv4 and IPv6 addresses of i2p hidden services (eepsites). Impact is de-anonymization; attack would take days to complete. Affected vers...
CVE-2023-45361
The CVE-2023-45361 issue affects MediaWiki’s Vector Skin (VectorComponentUserLinks.php) in versions prior to 1.39.5 and 1.40.x prior to 1.40.1. The root cause is that MalformedTitleException is uncaught when a vector-intro-page title is invalid, which can lead to incorrect web pages being produce...
CVE-2023-46586
The CVE affects the Weborf web server implementation (cgi.c) prior to version 1.0. The root cause is a misused strncpy that fails to terminate CGI script paths with a null character, leaving input paths unterminated. This impacts Weborf releases before 1.0 across reported versions (0.17–0.20). Pr...
python3.11 security update
An update is available for python3.11. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...
SUSE: Security Advisory (SUSE-SU-2024:3418-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for NULL Pointer Dereference in Sierrawireless Aleos
CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit...
Fedora: Security Advisory (FEDORA-2024-6dedbc5cf9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-7db9258d37)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: curl (CVE-2024-6197_-_A)
The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6197-A advisory. - NIST NVD Details CVE-2024-6197 Note that Nessus has not tested for this issue but has instead relied only on...
CVE-2024-22303
CVE-2024-22303 is an Incorrect Privilege Assignment vulnerability in the favethemes Houzez WordPress theme (affected versions “n/a through 3.2.4”). The issue allows Privilege Escalation for authenticated users (Subscriber+). CVSS v3.1 base score 8.8 (HIGH) with network exposure, low attack comple...
CVE-2024-21743
CVE-2024-21743 is a Privilege Escalation in the favethemes Houzez Login Register WordPress plugin (houzez-login-register) affecting versions ≤ 3.2.5. The issue enables authenticated users (Subscriber level) to escalate privileges, effectively via an account takeover vector; it is described as a S...
Fedora: Security Advisory (FEDORA-2024-f7f36c20a2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
