80 matches found
CVE-2024-42482 fish-shop/syntax-check Improper Neutralization of Delimiters
fish-shop/syntax-check is a GitHub action for syntax checking fish shell files. Improper neutralization of delimiters in the pattern input specifically the command separator ; and command substitution characters and mean that arbitrary command injection is possible by modification of the input...
CVE-2024-42482 fish-shop/syntax-check Improper Neutralization of Delimiters
fish-shop/syntax-check is a GitHub action for syntax checking fish shell files. Improper neutralization of delimiters in the pattern input specifically the command separator ; and command substitution characters and mean that arbitrary command injection is possible by modification of the input...
CVE-2024-40400
An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file...
CVE-2024-40400
CVE-2024-40400 is an arbitrary file upload vulnerability in Automad v2.0.0’s image upload function. The underlying issue allows an attacker to upload a crafted file and execute arbitrary code on the server. CVSSv3.1 base metrics indicate network access, low attack complexity, and required privile...
CVE-2024-35222
CVE-2024-35222 affects Tauri; remote origin iFrames can bypass origin checks to access IPC endpoints when not explicitly allowed (v1: before 1.6.7; v2: before 2.0.0-beta.19). Vulnerability enables an attacker-controlled iframe to invoke Tauri commands (e.g., delete project, transfer credits) via ...
CVE-2023-49473
Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build 6245 is vulnerable to Incorrect Access Control...
CVE-2024-25168
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface...
CVE-2024-25164
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...
Path traversal
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...
CVE-2024-25164
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...
CVE-2024-25164
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...
CVE-2024-25435
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
CVE-2024-22529
The CVE-2024-22529 entry affects TOTOLINK X2000R_V2 (version 2.0.0-B20230727.10434). A command-injection vulnerability exists in sub_449040 (handle function) of /bin/boa, caused by improper input filtering of constructed command characters. Consequence: arbitrary command execution with high impac...
Cross site request forgery (csrf)
An cross site request forgery CSRF vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information...
CVE-2020-18416
Affected software/component: Jymusic v2.0.0. Vulnerability type: Cross-Site Request Forgery (CSRF). Root cause / impact: CSRF allows an attacker to trigger arbitrary code execution by targeting the endpoint "/admin.php?s=/addons/config.html&id=6", enabling modification of payment information. The...
CVE-2023-29578
The CVE-2023-29578 entry affects mp4v2 v2.0.0, where a heap buffer overflow is triggered in the destructor MP4StringProperty::~MP4StringProperty() implemented in mp4property.cpp. The vulnerability is documented with a CVSS v3.1 base score of 8.8 (HIGH) across confidentiality, integrity, and avail...
CVE-2023-29584
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...
Center for Internet Security (CIS) unveils Azure Foundations Benchmark v2.0.0
The Center for Internet Security CIS recently unveiled the latest version of their Azure Foundations Benchmark—Version 2.0.0. This is the first major release since the benchmark was originally released more than 4 years ago, which could lead you to believe that this update would come with a bunch...
