4852 matches found
CVE-2023-36549
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2022-22447
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
aaronblaser-sdk (>=1.0.0 <=1.0.1), actoolkit (>=2.6.4 <=2.6.10) +272 more potentially affected by CVE-2023-43804 via urllib3 (>=2.0.0 <=2.0.5)
urllib3 PYPI version =2.0.0, =1.0.0, =2.6.4, =0.0.1, =0.1.1, =0.5.0, =0.1.23, =0.4.3, =0.4.1, =0.0.12, =0.0.14 and more Source cves: CVE-2023-43804 Source advisory: OSV:GHSA-V845-JXX5-VC9F...
0lever-utils (>=0.0.2 <=0.0.7), 2keys (=0.5.1) +4794 more potentially affected by CVE-2023-43804 via urllib3 (>=1.10.2 <=1.26.16)
urllib3 PYPI version =1.10.2, =0.0.2, =0.0.2, =0.1.0, =0.1.0, =0.2.0rc1, =1.0.2, =0.3.4, =0.4.6, =0.1.0, =0.5.6, =0.5.6.dev1 - acapy-patched-old =0.5.6 and more Source cves: CVE-2023-43804 Source advisory: OSV:GHSA-V845-JXX5-VC9F...
UBUNTU-CVE-2023-3979
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with you on your branch get permission to write to the...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from a deleted project...
matrix-synapse-testutils (>=1.65.0.0 <=1.92.2.0) potentially affected by CVE-2023-42453 via matrix-synapse (>=1.65.0 <=1.92.2)
matrix-synapse PYPI version =1.65.0, =1.65.0.0, =1.92.2.0 Source cves: CVE-2023-42453 Source advisory: OSV:PYSEC-2023-180...
Synapse Security Breach
synapse is an application for open federated instant messaging and VoIP A security vulnerability exists in Synapse that stems from the temporary storage of plaintext passwords during password changes. Affected products and versions; Synapse versions prior to 1.66.0 through 1.93.0...
WordPress Plugin Welcart e-Commerce SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
CVE-2023-38718
IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606...
GraphQL.js Resource Management Error Vulnerability
GraphQL.js is a GraphQL reference implementation for JavaScript in the GraphQL open source. A security vulnerability exists in GraphQL.js versions 16.3.0 through 16.8.1, which stems from insufficient checking in the OverlappingFieldsCanBeMergedRule.ts file when parsing a large query, making it...
PT-2023-27415 · Ibm · Ibm Storage Protect
Name of the Vulnerable Software and Affected Versions: IBM Storage Protect versions 8.1.0.0 through 8.1.19.0 Description: The issue allows a privileged user to obtain sensitive information from the administrative command line client. Recommendations: For versions 8.1.0.0 through 8.1.19.0, conside...
CVE-2022-28357
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account...
Nats-Server Path Traversal Vulnerability
Nats-Server is a high-performance server for Nats.io, cloud and edge native messaging systems. A path traversal vulnerability exists in Nats-Server versions 2.2.0 through 2.7.4, which stems from a path from an administrative account to an administrative operation that is not as expected...
at.molindo:git-commit-id-plugin (=2.1.10-alpha-1), at.nonblocking:nonsnapshot-maven-plugin (=3.0.1) +4141 more potentially affected by CVE-2023-4759 via org.eclipse.jgit:org.eclipse.jgit (>=1.2.0.201112221803-r <=5.13.2.202306221912-r)
org.eclipse.jgit:org.eclipse.jgit MAVEN version =1.2.0.201112221803-r, =2.0.0, =2.0.4, =0.1.1, =0.1.1, =2.0.0, =0.0.1, =0.2.8, =1.5.6 - br.com.sabium.gradle-bump:br.com.sabium.gradle-bump.gradle.plugin =1.0.1 and more Source cves: CVE-2023-4759 Source advisory: OSV:GHSA-3P86-9955-H393...
Vyper Security Vulnerability
Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper versions 0.2.9 through 0.3.10, which stems from the fact that locks of type @nonreentrant or @nonreentrant are not reentrant-checked at runtime...
anomalib-orobix (>=0.7.0.dev134 <=0.7.0.dev143), aqueduct-llm (=0.0.1) +26 more potentially affected by CVE-2023-41626 via gradio (>=1.7.7 <=3.27.0)
gradio PYPI version =1.7.7, =0.7.0.dev134, =0.1.9, =0.1.0, =0.7.3, =0.0.2, =0.1.1, =1.0.4, =0.0.3, =1.0.3, =0.0.1, =2.0.0rc3, =2.2.1 and more Source cves: CVE-2023-41626 Source advisory: OSV:GHSA-V4Q9-QGQF-7JWP...
PT-2023-5448
Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.12 through 16.2.7 GitLab EE versions 16.3 through 16.3.4 GitLab Community Edition CE versions 13.12 through 16.2.7 GitLab Community Edition CE versions 16.3 through 16.3.4 Description The issue is related to a flaw in...