10156 matches found
GHSA-59J7-GHRG-FJ52 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-8C8W-F7WP-2JR2 vulnerabilities
Vulnerabilities for packages: croc...
GHSA-3J7G-922G-J6R3 vulnerabilities
Vulnerabilities for packages: upx...
CVE-2023-23456 vulnerabilities
Vulnerabilities for packages: upx...
CVE-2024-53427 vulnerabilities
Vulnerabilities for packages: jq...
GHSA-W97F-W3HQ-36G2 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-3J7G-922G-J6R3 vulnerabilities
Vulnerabilities for packages: upx...
CVE-2024-53427 vulnerabilities
Vulnerabilities for packages: jq...
GHSA-W97F-W3HQ-36G2 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-59J7-GHRG-FJ52 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-8G9C-28FC-MCX2 vulnerabilities
Vulnerabilities for packages: dotnet...
[SECURITY] Fedora 41 Update: fluent-bit-3.2.8-1.fc41
Fluent Bit is a high performance and multi-platform log forwarder...
CVE-2024-13903
A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JSGetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely...
CVE-2024-10096
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-6866
corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...
CVE-2024-6827
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data...
CVE-2024-6839
corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...
CVE-2024-7776
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...