17016 matches found
CVE-2023-7041
A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this issue is some unknown functionality of the file /file-manager/rename.php. The manipulation of the argument newName leads to path traversal: '../filedir'. The attack may be...
PYSEC-2023-267
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are...
PYSEC-2023-266
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the executi...
CVE-2022-47597 WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker – Popup for opt-ins, lead gen, & more.This issue affects Popup Maker – Popup for opt-ins, lead gen, & more: from n/a through 1.17.1...
CVE-2023-31092
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2...
BELL-CVE-2023-6932
Bulletin has no description...
BELL-CVE-2023-51384
Bulletin has no description...
CVE-2023-6974 Server-Side Request Forgery (SSRF)
A malicious user could use this issue to access internal HTTPs servers and in the worst case ie: aws instance it could be abuse to get a remote code execution on the victim machine...
SUSE CVE-2023-6857
When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and...
MAL-2023-8723 Malicious code in nice-dag-kernel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9daba1d90e3e64cd044b78b1bbb9123a3c748dddbd37b2549c9dee2164eaa56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2023-6004
Bulletin has no description...
BELL-CVE-2023-48795
Bulletin has no description...
CVE-2023-50976
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API...
GO-2023-2400 Escalation of privileges in github.com/sap/cloud-security-client-go
An unauthenticated attacker can obtain arbitrary permissions within the application under certain conditions...
OSV-2023-1313 Heap-buffer-overflow in isvcd_start_of_pic
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65060 Crash type: Heap-buffer-overflow WRITE Crash state: isvcdstartofpic isvcdparsedecodeslice isvcdparsenalunit...
Potential CSV export data leak
Impact In ActiveAdmin versions prior to 2.12.0, a concurrency issue was found that could allow a malicious actor to be able to access potentially private data that belongs to another user. The bug affects the functionality to export data as CSV files, and was caused by a variable holding the...
Path traversal in MLflow
Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...
BELL-CVE-2023-50471
Bulletin has no description...