1873 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an alias overflow issue in the ASoC component in the sof-nau8825 module...
open-vm-tools: SAML token signature bypass
An improper signature verification flaw was found in open-vm-tools that may lead to a bypass of SAML token signature. A malicious actor that has been granted Guest Operation Privileges in a target virtual machine may be able to elevate their privileges if that target virtual machine has been...
SUSE CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values and valueslist methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed arg...
DEBIAN-CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values and valueslist methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed arg...
PYSEC-2024-70
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values and valueslist methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed arg...
Malicious code in sap-alias (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9d5947011c0d2f0634a4cabd1e6aacf32b08a7ef35841040bb24920a255e193 The OpenSSF Package Analysis project identified 'sap-alias' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7535 Malicious code in sap-alias (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9d5947011c0d2f0634a4cabd1e6aacf32b08a7ef35841040bb24920a255e193 The OpenSSF Package Analysis project identified 'sap-alias' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
GO-2024-2520 Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana
Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
Malicious code in alias-to_method (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6564 Malicious code in alias-to_method (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6563 Malicious code in alias-scope (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alias-scope (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6562 Malicious code in alias-metrics (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alias-helper (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6561 Malicious code in alias-helper (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alias-metrics (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alias-class (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6560 Malicious code in alias-class (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-support_alias_class_method (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-6303 Missing Authorization in Conduit
Missing authorization in Client-Server API in Conduit =0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege escalation by moving the admins alias to a room which they control, allowing them to run commands resetting passwords, siging json with the...