17016 matches found
CVE-2024-27756
GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title...
Whoogle Search Path Traversal vulnerability
Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...
GO-2024-2606 SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
An integer overflow in the calculated message size of a query or bind message could allow a single large message to be sent as multiple messages under the attacker's control. This could lead to SQL injection if an attacker can cause a single query or bind message to exceed 4 GB in size...
Log Injection
ckan is vulnerable Log Injection. The vulnerability is due to the lack of filtering on incoming parameters in the user endpoint, allowing attackers to inject false log entries or corrupt the log file format, resulting in Log Injection...
BELL-CVE-2024-26630
Bulletin has no description...
BELL-CVE-2023-52608
Bulletin has no description...
BELL-CVE-2024-26629
Bulletin has no description...
CVE-2024-0800
creationtimestamp| type| source ---|---|--- 2024-03-13 20:23:05+00:00| seen| https://t.me/ctinow/207116 2024-03-13 20:27:45+00:00| seen| https://t.me/ctinow/207122 2024-03-14 12:41:05+00:00| published-proof-of-concept| https://t.me/ctinow/207672 2024-05-14 18:10:04+00:00|...
CVE-2024-28192 NoSQL Injection Leading to Authentication Bypass in your_spotify
yourspotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version 1.8.0 is vulnerable to NoSQL injection in the public access token processing logic. Attackers can fully bypass the public token authentication mechanism, regardless if a public token has been generated befo...
BELL-CVE-2023-52495
Bulletin has no description...
BELL-CVE-2023-52494
Bulletin has no description...
BELL-CVE-2024-26612
Bulletin has no description...
BELL-CVE-2023-52490
Bulletin has no description...
BELL-CVE-2023-52489
Bulletin has no description...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28112 Cross site scripting on router page in Peering Manager
Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting XSS attack in the name attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code wi...
CVE-2024-21334
Open Management Infrastructure OMI Remote Code Execution Vulnerability...
CVE-2024-21392
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-1226
The CVE-2024-1226 entry concerns Rejetto Http File Server, where the software does not properly neutralize certain characters when data is placed in outgoing HTTP headers. This header injection can allow an attacker to control the HTTP response and potentially perform cross-site scripting and cac...