13097 matches found
MAL-2023-8015 Malicious code in cnp_al_corp_front (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca87bb9f11572bb7178a087d94273972886a104b0d9f9b25ea8799b418f8c85c Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
Streamline Software Bill of Materials (SBOM) Generation with Wiz's Agentless SBOM
Enhance software security and supply chain risk management with Wiz's agentless scanning technology for effortless SBOM creation...
CVE-2023-3417
Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This...
Buffer Overflow
sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...
BELL-CVE-2023-3609
Bulletin has no description...
CVE-2023-22045 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...
CVE-2023-22044 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2023-22006 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2023-21950 vulnerabilities
Vulnerabilities for packages: mysql...
SUSE-SU-2023:2870-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-3195: Fixed stack overflow in coders/tiff.c while parsing malicious tiff file bsc1212235...
WordPress Advanced Product Sample for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Product Sample for WooCommerce Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e327e9294a5c Credits Rafie...
WordPress Easy Courses Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Easy Courses Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ad0b50099b Credits Rafie Muhammad Patchstack Required...
Oracle Critical Patch Update Advisory - July 2023
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...
CVE-2023-37770
faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print at /boxes/ppbox.cpp...
MAL-2023-805 Malicious code in sssssssignalr-temp-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-3692 Unrestricted Upload of File with Dangerous Type in admidio/admidio
Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...
CVE-2023-3444 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to merge arbitrary code into protected branches...
GHSA-M9JJ-P947-M8XV Jenkins mabl Plugin missing permission check
Jenkins mabl Plugin 0.0.46 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...
