CVE-2024-23673 Apache Sling Servlets Resolver: Malicious code execution via path traversal

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system. If the...

PT-2024-33940

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: The issue is related to the Linux kernel, where a problem with the dmub psr enable function and Parade 08-01 TCON causes black screens and kernel WARNING traces at bootup and during fullscree...

CVE-2023-41277 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

PT-2024-20466 · Unknown · Stereoscope

Name of the Vulnerable Software and Affected Versions: stereoscope versions prior to 0.0.1 Description: It is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary directory. This issue is...

CVE-2024-24558 react-query-streamed-hydration xss

TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web. The @tanstack/react-query-next-experimental NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or...

SUSE-SU-2024:0250-1 Security update for sevctl

This update for sevctl fixes the following issues: - CVE-2023-50711: Fixed out of bounds memory accesses in vmm-sys-util bsc1218502, bsc1218499 Non-security fixes: - Updated to version 0.4.3 jscPED-4981...

PYSEC-2024-126

Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary...

CVE-2024-23340 @hono/node-server can't handle "double dots" in URL

@hono/node-server is an adapter that allows users to run Hono applications on Node.js. Since v1.3.0, @hono/node-server has used its own Request object with url behavior that is unexpected. In the standard API, if the URL contains .., here called "double dots", the URL string returned by Request...

PT-2025-31025 · Shlex +1 · Shlex +1

Name of the Vulnerable Software and Affected Versions: shlex crate versions prior to 1.2.1 Description: The shlex crate before version 1.2.1 for Rust allows unquoted and unescaped instances of the and xa0 characters, which may facilitate command injection. Recommendations: Update the shlex crate ...

PYSEC-2024-103

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...

PT-2024-19271 · Unknown · Whoogle Search

Name of the Vulnerable Software and Affected Versions: Whoogle Search versions prior to 0.8.4 Description: Whoogle Search is a self-hosted metasearch engine. The issue arises from the element method in app/routes.py not validating the user-controlled src type and element url variables, which are...

CVE-2024-22406 Blind SQL-injection in DAL aggregations in Shopware

Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations...

CVE-2023-22527

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...

PT-2024-12549 · Webkul · Webkul Qloapps

Name of the Vulnerable Software and Affected Versions: webkul qloapps versions prior to 1.6.0 Description: An issue in webkul qloapps allows an attacker to obtain sensitive information via the id order parameter. Recommendations: For versions prior to 1.6.0, update to version 1.6.0 or later to...

PT-2024-14926 · WordPress · Ecwid Ecommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Ecwid Ecommerce Shopping Cart WordPress plugin versions prior to 6.12.5 Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

PT-2024-14871 · WordPress · Wp Custom Widget Area

Name of the Vulnerable Software and Affected Versions: WP Custom Widget area WordPress plugin versions 1.2.5 and earlier Description: The issue arises from the plugin not properly applying capability and nonce checks on its AJAX action callback functions. This could allow attackers with subscribe...

PT-2024-2760 · Mongodb +3 · Mongodb C Driver +3

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions prior to 1.25.0 Description: The issue is related to the bson utf8 validate function in the MongoDB C Driver, which can cause an infinite loop when called with certain inputs. This may allow a remote attacker to caus...

PT-2024-13803 · Unknown · Lif Auth Server

Name of the Vulnerable Software and Affected Versions: Lif Auth Server versions prior to 1.4.0 Description: The issue relates to the get pfp and get banner routes on Auth Server, where there is no check to ensure that the file received through these URLs is correct. This could allow an attacker...

SUSE: Security Advisory (SUSE-SU-2024:0075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-14: Path Traversal and Untrusted Upload File in Pandora FMS

The vulnerability was identified in Pandora FMS, versions from 700 through 776. The vulnerability allows to modify directories, create and upload files outside of authorized directories. The vulnerability is a part of a chain that leads to remote code execution and complete server compromise...