4675 matches found
SUSE CVE-2023-3735
Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2023-3737
Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. Chromium security severity: Medium...
PYSEC-2023-308
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...
HCL BigFix Platform SQL注入漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Bigfix WebUI API App prior to version 14,...
CVE-2023-2959
Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.This issue affects Oliva Expertise EKS: before 1.2...
TapHome SQL注入漏洞
TapHome is a smart home system that you can tweak yourself by TapHome Slovakia. A SQL injection vulnerability exists in TapHome versions prior to 2023.2. The vulnerability stems from the presence of a SQL injection vulnerability that allows a low-privileged user to execute arbitrary SQL commands...
Open Enclave SDK 安全漏洞
Open Enclave SDK is a hardware-independent open source library from Open Enclave Open Source. It is used to develop applications that utilize the hardware-based Trusted Execution Environment also known as Enclave. A security vulnerability exists in versions of Open Enclave SDK prior to 0.19.3,...
ALPINE-CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
Froxlor 安全漏洞
Froxlor is a set of lightweight server management software from the Froxlor team. A command execution vulnerability exists in versions prior to froxlor 2.0.21 that stems from an output encoding or escaping error. An attacker can exploit the vulnerability to cause command execution...
python-cryptography 信任管理问题漏洞
python-cryptography is a Python code library for cryptographic applications from the Cryptographic team. A security vulnerability exists in python-cryptography versions prior to 41.0.2, which stems from incorrectly handling SSH certificates with critical options...
CVE-2023-1547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51...
CVE-2023-38065
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible...
Apache Airflow 路径遍历漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A path traversal vulnerability exists in Apache Airflow versions prior to 2.6.3,...
PT-2023-4014 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.3 Description: The issue is related to improper authorization in Apache Airflow, allowing unauthorized read access to a DAG through a specially crafted URL. This could enable a remote attacker to disclose...
Chamilo 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo version 1.11.x through versions...
Apache Johnzon 代码问题漏洞
Apache Johnzon is the United States Apache Apache company provides a JsonProcessing aka JSR-353 implementation of the project. A denial of service vulnerability exists in Apache Johnzon versions prior to 1.2.21, which stems from the program mishandling a large number of message requests and can b...
SAMSUNG Calendar 路径遍历漏洞
SAMSUNG Calendar is a calendar module from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Calendar versions prior to 12.4.07.15, which stems from a potential zip path traversal vulnerability that could allow an attacker to write to arbitrary files...
Novu 输入验证错误漏洞
Novu is an open source notification infrastructure for developers. An input validation error vulnerability exists in versions prior to Novu 0.16.0 that stems from the presence of an open redirection issue...
