CVE-2024-45793 Cross-site Scripting from in Confidant API call

Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The following endpoints are subject to a cross site scripting vulnerability: GET /v1/credentials, GET /v1/credentials/, GET /v1/archive/credentials/, GET /v1/archive/credentials, POST...

CVE-2024-42351 Possible Data Tampering & Loss of Public Datasets in Galaxy

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy and...

CVE-2024-42351

CVE-2024-42351 affects the Galaxy open‑source data analysis platform, where an attacker can potentially replace contents of public datasets, causing data loss or tampering. Affected versions are Galaxy releases prior to 21.05; patches have been applied in all supported branches back to release_21...

CVE-2024-42346

CVE-2024-42346 affects Galaxy: stored Cross-Site Scripting via the editor visualization endpoint at /visualizations. The vulnerability arises from storing HTML/JS that can execute on edit operations. Patches were applied across supported Galaxy branches (to mitigate this risk); upgrading to the p...

CVE-2024-42346 Stored Cross Site Scripting (Stored XSS) in Galaxy

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All...

Xorg-x11-server: heap buffer overflow in disabledevice

...

Unspecified vulnerability in Linux kernel (CNVD-2024-39286)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-39278)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of an integer overflow problem. No details of the vulnerability are provided at this time...

eNMS security vulnerabilities

eNMS is a network automation platform from eNMS Open Source. A security vulnerability exists in eNMS versions 4.4.0 through 4.7.1, which stems from vulnerability to directory traversal attacks via scanfolder...

Unspecified vulnerability in Linux kernel (CNVD-2024-39296)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly synchronizing the state of a network interface. No details of the vulnerability are provided at...

Unspecified vulnerability in Linux kernel (CNVD-2024-39283)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...

eNMS security vulnerabilities

eNMS is an open source network automation platform from eNMS. A security vulnerability exists in eNMS version 4.0.0, which stems from vulnerability to directory traversal attacks via gettreefiles...

Plate Cross-Site Script Vulnerabilities

Plate is an open source rich text editor for Udecode. Plate suffers from a cross-site scripting vulnerability that stems from susceptibility to cross-site scripting XSS and information disclosure attacks...

SeaCMS security vulnerabilities

SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2, which can be exploited by an attacker to execute arbitrary code on the server b...

itsourcecode Online Bookstore Code Issues and Vulnerabilities

itsourcecode Online Bookstore is an online bookstore of itsourcecode open source. A code issue vulnerability exists in version 1.0 of itsourcecode Online Bookstore due to an unrestricted file upload in the parameter image...

maccms10 security vulnerabilities

maccms10 is magicblack open source a set of PHP + MYSQL environment running under the perfect and powerful rapid website building system. A security vulnerability exists in maccms10 version v2024.1000.4040, which stems from the presence of a stored cross-site scripting XSS vulnerability that allo...

Unspecified vulnerability in Linux kernel (CNVD-2024-39261)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of an underflow problem. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-39282)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing out-of-bounds reads. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-39285)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from memory reuse after release. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-39281)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...