13097 matches found
BELL-CVE-2023-6478
Bulletin has no description...
MAL-2023-8698 Malicious code in css-hell (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware add41af1a627bb97a8a95ccab38f262f0d07cd937276bb7b10b01d01f4a4478d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-31546
Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...
CVE-2023-47324
Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting XSS via the message/notification feature...
CVE-2015-8314
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...
Limited File Write
MindsDB is vulnerable to Limited File Write. The vulnerability is caused due to a put method in mindsdb/mindsdb/api/http/namespaces/file.py does not validate the user-controlled name value, which is used to construct a temporary file name. This allows to write files anywhere on the server leading...
MAL-2023-8688 Malicious code in blockchain-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a999a1b33fbea1c383e34a3e37196b2d9e96946685c3fbbff0720c1295e4bec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-6615 Typecho manage-users.php information disclosure
A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/manage-users.php. The manipulation of the argument page leads to information disclosure. The exploit has been disclosed to the public and...
CVE-2023-48958
gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gfmpdresolveurl mediatools/mpd.c:4589...
CVE-2023-49955
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP Open Charge Point Protocol for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing...
CVE-2023-41106
An issue was discovered in Zimbra Collaboration ZCS before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42...
CVE-2023-34439
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser...
CVE-2023-43608
A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder...
CVE-2023-49080 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
BELL-CVE-2023-39804
Bulletin has no description...
ASB-A-302986375
Bulletin has no description...
ASB-A-266568298
Bulletin has no description...
ASB-A-300368874
Bulletin has no description...
PUB-A-244398863
In ppcfwenable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...