20947 matches found
CVE-2024-47498
An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. Several configuration statements meant to enforce limits on MAC learning and moves can be...
CVE-2024-47498
CVE-2024-47498 affects Junos OS Evolved on QFX5000 Series. The issue is an unimplemented/unsupported feature in the UI of the CLI that, when configured, does not enforce limits on MAC learning/moves, potentially causing control-plane overload and a denial of service for legitimate traffic. The vu...
Progress Telerik UI for WinForms < 2024.3.924 Command Injection
The version of Progress Telerik UI for WinForms installed on the remote host is prior to 2024.3.924. It is, therefore, affected by a vulnerability as referenced in the cve-2024-7679 advisory. - In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is...
firefox: thunderbird: Potential directory upload bypass via clickjacking
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking...
The vulnerability of the OAuth-based software platform implementation for Git-based collaborative code development on GitLab allows a perpetrator to carry out a Cross-Window Forgery attack.
The vulnerability of the OAuth-based software platform’s implementation for collaborative code development on GitLab is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to execute a Cross-Window Forgery...
CentOS 6 : chromium-browser (RHSA-2020:2544)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. - Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to...
PT-2024-38040
Name of the Vulnerable Software and Affected Versions open-webui version 0.3.8 Description An information disclosure issue exists related to the embedding model update feature under admin settings. When a user updates the model path, the system checks if the file exists and provides different err...
CentOS 6 : chromium-browser (RHSA-2020:3377)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3377 advisory. - Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via ...
CentOS 6 : chromium-browser (RHSA-2020:1487)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1487 advisory. - Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
KLA73910 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a...
VulnCheck KEV: CVE-2024-7679
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
VulnCheck KEV: CVE-2024-7576
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...
Progress Telerik UI for WinForms Installed
Binary data progresstelerikuiforwinformsinstalled.nbin...
Malicious code in @linx-ui/pharmacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in @linx-ui/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in @linx-ui/admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e06162b8e8bc231c6695432b386893a11a099d6171c4f98d626dba61061456d9 The OpenSSF Package Analysis project identified '@linx-ui/admin' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9085 Malicious code in @linx-ui/admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e06162b8e8bc231c6695432b386893a11a099d6171c4f98d626dba61061456d9 The OpenSSF Package Analysis project identified '@linx-ui/admin' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Telerik UI for WPF < 2024.3.924 Multiple Vulnerabilities
The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q3 2024.3.924. It is, therefore, affected by multiple vulnerabilities: - A command injection attack is possible through improper neutralization of hyperlink elements. CVE-2024-7575 - A code execution...
The vulnerability of the GetCGI() function in the user interface of DrayTek Vigor networking device software allows a hacker to execute arbitrary code.
The vulnerability of the GetCGI function in the user interface of DrayTek Vigor networking devices lies in buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request remotely...