13097 matches found
GHSA-F5X3-32G6-XQ36 vulnerabilities
Vulnerabilities for packages: sqlpad, opensearch-dashboards, npm, tensorflow-cpu-jupyter, lerna, py3-jupyterlab, opensearch-dashboards-fips, pnpm-stage0...
BELL-CVE-2024-29018
Bulletin has no description...
CVE-2024-26557
Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...
GHSA-3QW5-V9CC-V262 Cross site scripting in moodle
A Cross-Site Scripting XSS vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter...
MAL-2024-1132 Malicious code in caas-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6944959a95e6d1bd73a53289912b43eed0d1855c541983e98a204359c5df0ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-2611
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...
GHSA-CG24-JJR5-RXMF Path traversal in flaskcode Devan-Kerman ARRP
Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...
BELL-CVE-2024-26636
Bulletin has no description...
BELL-CVE-2024-26641
Bulletin has no description...
BELL-CVE-2024-26635
Bulletin has no description...
BELL-CVE-2023-52617
Bulletin has no description...
MAL-2024-1114 Malicious code in babel-preset-slick (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2023-52613
Bulletin has no description...
CVE-2024-26632 block: Fix iterating over an empty bio with bio_for_each_folio_all
In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bioforeachfolioall If the bio contains no data, biofirstfolio calls pagefolio on a NULL pointer and oopses. Move the test that we've reached the end of the bio from bionextfolio to...
GHSA-MJQ8-GG9X-87GR FitNesse Cross-site Scripting vulnerability
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter...
CVE-2024-27757
flusity CMS through 2.45 allows tools/addonsmodel.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."...
DLA-3765-1 cacti - security update
Bulletin has no description...
CVE-2024-28752 Apache CXF SSRF Vulnerability using the Aegis databinding
A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings including the default databinding are not impacted...