17016 matches found
BELL-CVE-2024-28835
Bulletin has no description...
BELL-CVE-2024-28834
Bulletin has no description...
BELL-CVE-2024-2494
Bulletin has no description...
File Validation Bypass
ibexa/core is vulnerable to File Validation Bypass. The vulnerability is due to inadequate file type validation within the validate function in FileExtensionBlackListValidator.php. When attempting to publish content with rejected file types, the validation fails which does prevent publication, bu...
CVE-2024-29338
Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery CSRF via /anchor/admin/categories/delete/2...
CVE-2024-28117 Grav vulnerable to Server Side Template Injection (SSTI)
Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible functions through the Utils::isDangerousFunction function, but does not impose restrictions on twig functions like twigarraymap, allowing attackers to bypass the validation and execute...
BELL-CVE-2021-40633
Bulletin has no description...
Cross Site Scripting(XSS)
livewire/livewire is vulnerable to Cross-site Scripting XSS. The vulnerability is due to inadequate input sanitization, allowing attackers to inject malicious HTML code via crafted URLs...
CVE-2024-29916
The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the ke...
PT-2024-13216 · Ibm · Ibm Mq
Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.0 LTS through 9.3 CD Description: The issue is related to an error within the MQ clustering logic, which can lead to a denial-of-service attack. This can be exploited via a remote attack. Recommendations: For IBM MQ versions...
The vulnerability of software for adjusting Intel XTU performance, related to deficiencies in access control, allows attackers to enhance their privileges.
The vulnerability of software for adjusting Intel XTU performance is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2024-20034 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3910 version 4.3.2.5 Description: A Directory Traversal issue was discovered in the process post function. When sending a certain POST request, it calls the function and exports information. Recommendations: For Draytek Vigor3910...
The vulnerability of software for adjusting Intel XTU performance, related to deficiencies in access control, allows attackers to enhance their privileges.
The vulnerability of software for adjusting Intel XTU performance is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2024-21653 · Frappe · Frappe
Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 14.66.3 Frappe versions prior to 15.16.0 Description: Frappe is a full-stack web application framework. The issue allows file permission to be bypassed using certain endpoints, granting less privileged users permissio...
PSF-2024-1
An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged...
BELL-CVE-2024-26632
Bulletin has no description...
BELL-CVE-2024-26638
Bulletin has no description...
BELL-CVE-2023-52609
Bulletin has no description...