5181 matches found
CVE-2024-45792
Mantis Bug Tracker MantisBT is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4...
PT-2024-31773 · Unknown · Mantis Bug Tracker
Name of the Vulnerable Software and Affected Versions: Mantis Bug Tracker MantisBT versions prior to 2.26.4 Description: The issue allows an unprivileged, registered user to retrieve information about other users' personal system profiles using a crafted POST request. This can lead to the...
CVE-2024-45792: Exposure of Sensitive Information to an Unauthorized Actor
Mantis Bug Tracker MantisBT is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4...
Mantis Bug Tracker information leakage vulnerability
Mantis Bug Tracker MantisBT is a bug tracker from Mantis Bug Tracker open source. An information disclosure vulnerability exists in Mantis Bug Tracker version 2.26.3 and earlier versions. An attacker exploits this vulnerability to retrieve information about another user's personal system...
Debian dla-3903 : libunbound-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3903 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3903-1 [email protected]...
Debian dsa-5775 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5775 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5775-1 [email protected] https://www.debian.org/securit...
CVE-2024-45613
CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting XSS vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code...
Malicious code in cgpt_burn_tracker_frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e14d717ae90e2a54db35f9e5962f984fc420b2afa1d3b8e0bc0d3631d7945bb The OpenSSF Package Analysis project identified 'cgptburntrackerfrontend' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
Debian dla-3891 : libmariadb-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3891 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3891-1 [email protected] https://www.debian.org/lts/security/...
RHSA-2023:7744 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7732 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7733 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7739 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7731 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7730 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7713 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
RHSA-2023:7712 Red Hat Security Advisory: tracker-miners security update
Bulletin has no description...
Aim security vulnerabilities
Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. A security vulnerability exists in Aim version 3.24 and earlier versions, which stems from an incorrect manipulation of the parameter query that can lead to cross-site scripting attacks...
Malware in roblox-event-tracker
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in roblox-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...