13097 matches found
Server-Side Request Forgery in github.com/greenpau/caddy-security
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery SSRF via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by...
CVE-2024-20970 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2024-20962 vulnerabilities
Vulnerabilities for packages: mysql...
BELL-CVE-2024-22025
Bulletin has no description...
MAL-2024-1009 Malicious code in execution-time-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb518a6f8c71bfcbaea6494b888189e261a9f7a6be487568339baeb334ad7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MGASA-2024-0037 Updated mbedtls packages fix security vulnerabilities
This update brings the mbedtls packages from 2.28.3 to the latest 2.28.7 release in the LTS branch, fixing a number of bugs as well the following security vulnerabilities: - Buffer overread in TLS stream cipher suites. - Timing side channel in private key RSA operations. - Buffer overflow in...
CVE-2023-41091
CVE-2023-41091 concerns an uncontrolled search path issue in Intel(R) MPI Library Software prior to version 2021.11. The vulnerability could allow an authenticated user to escalate privileges via local access, due to mismanagement of the library search path. Public references consistently identif...
BELL-CVE-2024-21386
Bulletin has no description...
CVE-2023-42374
The CVE-2023-42374 issue affects mystenlabs Sui Blockchain prior to v1.6.3, specifically the Sui node component. A remote attacker can execute arbitrary code and trigger a denial of service via a crafted compressed script. The vulnerability is rated Critical (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:...
Improper Input Validation
libmysofa.so is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of multiplications and additions in the treeRead function within btree.c. The flaw could potentially allow attackers to execute arbitrary code or cause a buffer overflow...
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...
CVE-2024-24000
jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter can be spliced into the upload path, resulting in arbitrary file uploads with controllable paths...
BELL-CVE-2024-23653
Bulletin has no description...
CVE-2024-21764
CVE-2024-21764 affects Rapid SCADA, specifically versions prior to 5.8.4. The issue is caused by the use of hard-coded credentials, which may allow a remote attacker to connect to a specific port and, according to the PT-2024-1449 entry, could enable full control of the system. Remediation guidan...
CVE-2024-22096 Relative Path Traversal in Rapid SCADA
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...
SUSE-SU-2024:0307-1 Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2023-40474: Fixed an integer overflow during MXF file parsing bsc1215796...
CVE-2024-24557 Moby classic builder cache poisoning
Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is built FROM scratch. Also, changes to some instructions most important being HEALTHCHECK and ONBUILD would not cause a cache miss. An...
BELL-CVE-2024-1085
Bulletin has no description...