5216 matches found
CVE-2024-5885
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...
CVE-2024-5885
CVE-2024-5885 concerns the Quivr project: stangirard/quivr v0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The issue arises from insufficient controls when the crawler accesses external websites, enabling an attacker to reach internal/local-network resources, including inter...
CVE-2024-5885 Server-Side Request Forgery (SSRF) in stangirard/quivr
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...
CVE-2024-5885 Server-Side Request Forgery (SSRF) in stangirard/quivr
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery SSRF vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability could allow a malicious user to gain acces...
CVE-2024-3330
The CVE-2024-3330 issue affects TIBCO Spotfire products: Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace. Root cause is insufficient input validation in Spotfire components, enabling remote code execution. Exploitation requires human interaction for some vectors (e.g., Windows...
CVE-2024-3330 Spotfire Remote Code Execution Vulnerability
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction fr...
CVE-2024-3330 Spotfire Remote Code Execution Vulnerability
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction fr...
AI Coding Companions 2024: AWS, GitHub, Tabnine + More
AI coding companions are keeping pace with the high-speed evolution of generative AI overall, continually refining and augmenting their capabilities to make software development faster and easier than ever before. This blog looks at how the landscape is changing and key features of market-leading...
MAL-2024-7047 Malicious code in wurl-aws-s3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wurl-aws-s3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6742 Malicious code in aws_s3-deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6741 Malicious code in aws_logs (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6740 Malicious code in aws_elasticsearch (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aws_elasticsearch (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6738 Malicious code in aws-upload (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6739 Malicious code in aws_codedeploy-agent (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6737 Malicious code in aws-sns_subscription (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6736 Malicious code in aws-cloud_search (RubyGems)
--- -= Per source details. Do not edit below this line.=-...