CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

BELL-CVE-2024-10978

Bulletin has no description...

CVE-2022-20845 Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability

A vulnerability in the TL1 function of Cisco Network Convergence System NCS 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerability is due to TL1 not freeing memory under some conditions. An attacker could exploit this vulnerability b...

CVE-2024-52308 vulnerabilities

Vulnerabilities for packages: gh...

GHSA-P2H2-3VG9-4P87 vulnerabilities

Vulnerabilities for packages: gh...

GHSA-RP9H-RF7G-HWGR vulnerabilities

Vulnerabilities for packages: efs-utils...

BELL-CVE-2024-21853

Bulletin has no description...

RHSA-2024:8791 Red Hat Security Advisory: krb5 security update

Bulletin has no description...

Moodle IDOR when accessing list of badge recipients

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

BELL-CVE-2024-11168

Bulletin has no description...

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system public, private, etc. The module doesn't sufficiently protect against Cross Site Request Forgery under allowing an attacker to trick a site user into...

GHSA-6X36-QXMJ-RV4P vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-11117 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11114 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11115 vulnerabilities

Vulnerabilities for packages: chromium...

Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...

GHSA-G5VP-J278-8PJH Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...