3309 matches found
CVE-2024-31890
IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 288171...
CVE-2024-4941
A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the postprocess function within gradio/components/jsoncomponent.py, where a user-controlled string is parsed as JSON. If the parsed JSON...
Moderate: bzip2 security update
The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. Security Fixes: bzip2: bzip2: Data integrity error when decompressing with data integrity test...
Malicious code in utils-hex (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wt-fe-buz-utilities-url (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in build-test-utilities (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-811 Malicious code in build-test-utilities (npm)
--- -= Per source details. Do not edit below this line.=-...
Class Pollution
Overview mesop is a Build UIs in Python Affected versions of this package are vulnerable to Class Pollution via the dataclassutils component. Remediation Upgrade mesop to version 0.14.1 or higher. References - GitHub Commit...
Malicious code in grammy-utils (npm)
This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722622ea790d1aa9a24e9418f5f3480a09e5501b039fa8256d60bba00291e894 Any computer that has this package installed or...
Advisory ROSA-SA-2025-2611
software: coreutils 8.32 OS: ROSA-CHROME packageevrstring: coreutils-8.32-5 CVE-ID: CVE-2024-0684 BDU-ID: 2024-00722 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the linebytessplit function src/split.c of the GNU Core Utilities GNU Coreutils suite of system utilities is related to a buffer...
CVE-2024-13433 Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-13433 Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Utilities for MTG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mtglink' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-13433
CVE-2024-13433 affects the Utilities for MTG WordPress plugin. The vulnerability is Stored Cross-Site Scripting via the mtglink shortcode in all versions up to 1.4.1, triggered by authenticated users with contributor-level access and above. The available documents confirm the affected plugin/vers...
WordPress plugin Utilities for MTG 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
Malicious code in controller-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34e748f33e1982598d357d378cb8b42a4361f9a056afdd2c66b16586e034fe41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DEBIAN-CVE-2024-55916
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel's ringbuffer is fully initialized, we can hit the panic below: hvutils: Registering HyperV Utility Drive...
Google Android sms_Utilities.c Out-of-Bounds Read Vulnerability
Google Android is an open source cell phone operating system developed by Google. Google Android suffers from an out-of-bounds read vulnerability that stems from incorrect boundary checking of the smsDisplayHexDumpOfPrivacyBuffer function in the smsUtilities.c file. An attacker can exploit the...
CVE-2024-13310
Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal:...