PT-2025-6920 · Unknown · Filemegane

Name of the Vulnerable Software and Affected Versions: FileMegane versions 3.0.0.0 through 3.4.0.0 Description: The issue exists due to a Server-Side Request Forgery SSRF vulnerability. This could allow executing arbitrary backend Web API requests, potentially leading to rebooting the services...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43052

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-49354

IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls...

CVE-2024-49354

IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls...

CVE-2024-49354

IBM Concert versions 1.0.0–1.0.2 are affected by a sensitive information disclosure vulnerability exploitable via specially crafted API calls. Root cause is described as exposure due to incompatible policies and insufficient protection of service data. A fix is available: upgrade to IBM Concert 1...

CVE-2024-49354 IBM Concert information disclosure

IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls...

CVE-2024-49354 IBM Concert information disclosure

IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls...

Cross-Site Request Forgery (CSRF)

Avenwu Whistle is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to insufficient validation of API requests, allowing attackers to perform malicious API calls that result in arbitrary code execution on the victim's machine...

GHSA-GG6X-448Q-PQQM Avenwu Whistle Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...

CVE-2024-55500

Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...

CVE-2024-55500

CVE-2024-55500 concerns CSRF in Avenwu Whistle (v2.9.90 and earlier). Affected component: the Avenwu Whistle API surface where requests lack proper origin/validation, enabling attackers to craft requests that trigger arbitrary code execution on the victim’s machine. Root cause, as described acros...

CVE-2024-55500

Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...

CVE-2024-43052 Improper Input Validation in Video Analytics and Processing

Memory corruption while processing API calls to NPU with invalid input...

BIT-GITLAB-2024-11828 Inefficient Algorithmic Complexity in GitLab

A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...

UBUNTU-CVE-2024-11828

A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...

CVE-2024-11828

GitLab CVE-2024-11828 affects GitLab CE/EE; DoS via crafted API calls across versions 13.2.4 up to before 17.4.5, 17.5 up to before 17.5.3, and 17.6 up to before 17.6.1. Root cause is a regression of an earlier patch leading to availability impact when processing API requests. Practical impact is...

CVE-2024-11828 Inefficient Algorithmic Complexity in GitLab

A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...

CVE-2024-11828 Inefficient Algorithmic Complexity in GitLab

A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...