CVE-2024-32965

Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. The jwt token header...

Taiga 安全漏洞

Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version v6.8.1, which stems from the inclusion of a CSV injection issue that could lead to arbitrary code execution...

The vulnerability of software platforms for developing and managing Adobe Commerce and Magento Open Source online stores lies in insufficient validation of requests on the server side. This allows attackers to execute SSRF attacks.

The vulnerability of software platforms for developing and managing Adobe Commerce and Magento Open Source online stores is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

1000 Projects Portfolio Management System MCA 安全漏洞

1000 Projects Portfolio Management System MCA is an open source portfolio management system by 1000 Projects. A security vulnerability exists in 1000 Projects Portfolio Management System MCA version 1.0 due to a SQL injection in parameter name...

gRPC 安全漏洞

gRPC is a modern, open-source, high-performance Remote Procedure Call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC that stems from the presence of a data corruption issue that could lead to a denial of service...

1000 Projects Portfolio Management System MCA 安全漏洞

1000 Projects Portfolio Management System MCA is an open source portfolio management system from 1000 Projects. A security vulnerability exists in 1000 Projects Portfolio Management System MCA version 1.0 due to an SQL injection in the parameter username...

CVE-2024-53268

Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. In affected versions attackers are able to abuse the fact that openExternal is used without any filtering of URI schemes to obtain remote code execution in Windows...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which is caused by an SQL injection into the parameter viewid...

eNMS 路径遍历漏洞

eNMS is an open source network automation platform from eNMS. A path traversal vulnerability exists in eNMS version 4.2 and earlier. An attacker could exploit this vulnerability to access sensitive files or directories on the system...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A security vulnerability exists in Centreon that stems from a possible SQL injection when creating wo...

Farmacia 安全漏洞

Farmacia is a content management system from code-projects open source. A security vulnerability exists in Farmacia version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter name...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty salon management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which originates from a SQL injection in the parameter name...

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect operation of the parameter sername that can result in a...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeql-extractor-iac-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3f77f847f2c7d09571ef2516734c1d483d434e0980f32c21967900b8d28dd4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

itsourcecode Tailoring Management System 注入漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in itsourcecode Tailoring Management System version 1.0, which originates from the presence of SQL injection...

PulseAudio 安全漏洞

PulseAudio is an open source audio system from PulseAudio for POSIX OS. The system is primarily used for audio transmission, among other things. A security vulnerability exists in PulseAudio. An attacker exploiting this vulnerability could cause the program to crash...