1580 matches found
CVE-2023-51446 GLPI LDAP Injection during authentication
GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12...
GHSA-C24V-8RFC-W8VW vulnerabilities
Vulnerabilities for packages: vite...
Malicious code in discord.js-selfbot-dmallfriends-v13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a0c3c66fdb2c5d4177a13be355a1578414167a74bf202f48f1380ba2a3379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-21647 vulnerabilities
Vulnerabilities for packages: ruby3.2-puma...
CVE-2023-52323 vulnerabilities
Vulnerabilities for packages: jwt-tool...
CVE-2023-50096
STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications 1.2.0, and thus c...
Buffer overflow
STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications 1.2.0, and thus c...
CVE-2023-50096
STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications 1.2.0, and thus c...
CVE-2023-50096
STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an StSafeAReceiveBytes buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications 1.2.0, and thus c...
PT-2024-13860 · Stmicroelectronics · Stsafe-A1Xx +1
Name of the Vulnerable Software and Affected Versions: STMicroelectronics STSAFE-A1xx versions prior to 3.3.7 X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications version 1.2.0 Description: The issue allows MCU code execution if an adversary has the ability to read from and write to th...
CVE-2023-46727
CVE-2023-46727 affects GLPI
GHSA-8G85-WHQH-CR2F vulnerabilities
Vulnerabilities for packages: traefik...
ROS-20231121-03
OpenSearch software package vulnerability related to improper permission saving. Exploitation exploitation of the vulnerability could allow an attacker to affect data integrity...
SUSE-SU-2023:4103-1 Security update for buildah
This update of buildah fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...
GHSA-MQ29-J5XF-CJWR vulnerabilities
Vulnerabilities for packages: zlib...
CVE-2023-5077 vulnerabilities
Vulnerabilities for packages: k3d...
SUSE-SU-2023:3815-1 Security update for cni
This update of cni fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...
glpi-project -- SQL injection in ITIL actors in GLPI
[email protected] reports: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The ITIL actors input field from the Ticket form can be used to...