271 matches found
CVE-2019-8458
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software...
HPESBHF04861 rev.2 - Certain HPE ProLiant DL/ML, MicroServer, Synergy and Edgeline Servers Using Certain Intel Processor BIOS, INTEL-SA-01153, 2025.1 IPU, Intel Processor Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.3001-16-2025 HPE ProLiant DL380 Gen10 Plus server - Prior to v2.3001-16-2025 HPE ProLiant DL360 Gen10 Plus server -...
K000150432: Intel UEFI vulnerabilities CVE-2024-39279 and CVE-2024-28047
Security Advisory Description CVE-2024-39279 Insufficient granularity of access control in UEFI firmware in some IntelR processors may allow a authenticated user to potentially enable denial of service via local access. CVE-2024-28047 Improper input validation in UEFI firmware for some IntelR...
CVE-2025-2320
A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...
@ronin-dist/render (>=1.0.386-leo-ron-885-experimental.35, <=1.0.490), @ronin/blade (>=0.0.1, <=0.2.7) +1 more potentially affected by unknown CVE via @sentry/bun (>=8.11.0, <=8.41.0)
@sentry/bun NPM version =8.11.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-R5W7-F542-Q2J4...
LinkStack 安全漏洞
LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. A security vulnerability exists in LinkStack versions 2.7.9 through 4.7.7 that stems from a server-side request forgery SSRF vulnerability in the...
CVE-2024-7517 Privileged escalation via crafted use of portcfg command
A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...
CVE-2024-7517 Privileged escalation via crafted use of portcfg command
A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...
Cross-site Scripting (XSS)
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization of user input in device-overview.blade.php, used by the...
PT-2024-8869 · Brocade · Brocade X7 +6
Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.2.0c Brocade Fabric OS versions 9.2.1 through 9.2.1a Description: The issue is related to a command injection vulnerability in the IPSEC component of Brocade Fabric OS, which could allow a local...
K000141505: Intel UEFI vulnerability CVE-2024-21829
Security Advisory Description Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21829 Impact Attackers may exploit this vulnerability to enable privilege escalati...
FlashArray和FlashBlade 安全漏洞
Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, U.S.A. Pure Storage FlashArray is an all QLC flash storage array.Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform for fil...
Malicious code in blade-sauce-labs_plugin (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6784 Malicious code in blade-sauce-labs_plugin (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-37621
StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...
StrongShop Cross-Site Scripting Vulnerability
StrongShop is a free and open source cross-border e-commerce mall website by StrongShop Open Source. A cross-site scripting vulnerability exists in StrongShop v1.0, which originates from a cross-site scripting vulnerability in the specgroupid parameter on /spec/index.blade.php...
Cross-Site Scripting (XSS)
illuminate/view is vulnerable to a Cross-site Scripting XSS. The vulnerability is due to inadequate input sanitization within blade templating, allowing attackers to inject malicious scripts into rendered views...
GHSA-VR95-P7Q6-8M9Q Laravel Cross-site Scripting (XSS) vulnerability in blade templating
Laravel 7.1.2 addresses a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrade as soon as possible...
Laravel Cross-site Scripting (XSS) vulnerability in blade templating
Laravel 7.1.2 addresses a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrade as soon as possible...