13092 matches found
K000148956: c-ares vulnerability CVE-2016-5180
Security Advisory Description Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot. CVE-2016-5180 Impact There ...
CGA-X8Q5-4432-QQ34
Bulletin has no description...
CVE-2024-12381 vulnerabilities
Vulnerabilities for packages: chromium...
sigstore has insufficient validation of integration timestamp during verification
Summary Versions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the "integration time" present in "v2" and "v3" bundles during the verification flow: the "integration time" is verified if a source of signed time such as an inclusion promise is present, b...
CGA-8XJM-6QW4-RQ5C
Bulletin has no description...
SUSE-SU-2024:4287-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068...
SQL Injection
tech.powerjob, powerjob is vulnerable to SQL injection. The vulnerability is due to improper handling of the version parameter, which allows attackers to manipulate SQL queries...
PT-2025-13868
Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...
CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
GHSA-VM32-9RQF-RH3R vulnerabilities
Vulnerabilities for packages: pnpm...
MAL-2024-11775 Malicious code in plugin-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94f214fcdbb802ff7c5fc8a5ed3a9b6beadad35c781b93af7a7f4465020fe333 The OpenSSF Package Analysis project identified 'plugin-e2e-tests' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Schneider Electric Modicon
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
DSA-5826-1 smarty3 - security update
Bulletin has no description...
CVE-2024-55635 Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 7.0 before 7.102...
BELL-CVE-2024-47615
Bulletin has no description...
BELL-CVE-2024-47600
Bulletin has no description...
BELL-CVE-2024-47541
Bulletin has no description...
CGA-5J94-HQ8C-4597
Bulletin has no description...