13092 matches found
MAL-2024-10429 Malicious code in eth-gas-report (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecd743511e25a28d813fdd6d85c3fcb14c688389759c53016792d6c536b99a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-0134 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
PYSEC-2024-201
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS vulnerabilities in the login dialog and the standalone application key confirmation dialog. An attacker who successfully talked a victim into clicking on...
RHSA-2005:238 Red Hat Security Advisory: evolution security update
Bulletin has no description...
CGA-X5VR-4RJX-26QH
Bulletin has no description...
CGA-RVWP-M99M-H72V
Bulletin has no description...
Session Fixation
Umbraco is vulnerable to Session Fixation. The vulnerability is due to a session timeout discrepancy where the Backoffice logout page displays a session timeout message before the server session expires, leading users to believe they are logged out about 30 seconds early. It allows an attacker to...
Mastodon < 3.5.14 Multiples Vulnerabilities
According to its self-reported version number, the Mastodon application running on the remote host is prior to 3.5.14 or 4.0.x prior to 4.0.10 or 4.1.x prior to 4.1.8. It is, therefore, affected by multiples vulnerabilities : - A Stored XSS through the translation feature - A Server-side request...
CGA-37J6-2H92-VMG9
Bulletin has no description...
CVE-2024-48061
langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...
BELL-CVE-2024-10525
Bulletin has no description...
SUSE CVE-2024-21537
Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function...
ASB-A-363850556
Bulletin has no description...
GHSA-6H8W-HRFP-PFFX Plenti arbitrary file deletion vulnerability
Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabili...
Plenti arbitrary file write vulnerability
Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...
BELL-CVE-2024-50086
Bulletin has no description...
BELL-CVE-2024-50082
Bulletin has no description...
BELL-CVE-2024-50083
Bulletin has no description...