2157 matches found
CVE-2024-24807 Sulu is vulnerable to HTML Injection via Autocomplete Suggestion
Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue when inputting HTML into the Tag name. The HTML is executed when the tag name is listed in the auto complete form. Only admin users can create tags so they are the only ones...
CVE-2024-24807: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue when inputting HTML into the Tag name. The HTML is executed when the tag name is listed in the auto complete form. Only admin users can create tags so they are the only ones...
Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : runC vulnerability (USN-6619-1)
The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6619-1 advisory. Rory McNamara discovered that runC did not properly manage internal file descriptor while managing containers. An attacker could...
Out-of-bounds Write
openssl:edge is vulnerable of Out-of-bounds Write. The vulnerability due to the application state might be corrupted with various application dependent consequences when returning to the caller. It allows an attacker could get complete control of the application process which leads to denial of...
Malicious code in wlwz-2312-2405 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a133fd8ec2d91859ac58de1e8195ef0997c23ef1eeb6cf885a1c5416a153b793 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-392 Malicious code in wlwz-2312-2406 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e160a6dd6d6ff375eaf51af8afdc05d16877d99bdf8df7bc4aa09368be629a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-327 Malicious code in wlwz-2312-1704 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe0cae4b95307e4dc15eaac3c7d6f896e90f40999f1c072920662ccc042001b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-215 Malicious code in wlwz-2312-0500 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6380234862769c4f33b2aee442495077d0850b25dd574794044672f901a2e3e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-638 Malicious code in wlwz-2312-5200 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aa0da4d15422aa4bd5114985f643d931d8d89ae24a789070a00b3c6f5af31ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-40547
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...
MAL-2024-153 Malicious code in ahmadzdzdzdzddddahas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f10f881888721e5e7bcdd3cb99e15e7948d9c5eadbb869e8ebb9bd54faebd96d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Gambio Online Webshop unauthenticated PHP Deserialization Vulnerability
A Remote Code Execution vulnerability in Gambio online webshop version 4.9.2.0 and lower allows remote attackers to run arbitrary commands via unauthenticated HTTP POST request. The identified vulnerability within Gambio pertains to an insecure deserialization flaw, which ultimately allows an...
CVE-2022-41786
Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1...
CVE-2024-20966
Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server...
CVE-2024-20926
Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or...
CVE-2024-20918
Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...
MAL-2024-128 Malicious code in uhqsniper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bc3babfc8b7310621d81f76510b2c16c577e4714f44f2b4f205ddc360f4f876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41786: Missing Authorization
Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1...
CVE-2024-20970
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
