18633 matches found
Jupyter Notebook Python Library 7.0.0 < 7.2.2 (CVE-2024-43805)
Jupyter Notebook is an extensible environment for interactive and reproducible computing. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked...
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly...
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly...
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly...
CVE-2024-5956
The entry CVE-2024-5956 affects Trellix IPS Manager. PT-2024-37269 identifies Trellix IPS Manager version 11.1.7.97 as vulnerable and states that unauthenticated remote attackers can bypass authentication to access partial data and receive garbage data in responses. The description implies a bypa...
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly...
CVE-2024-6332
The CVE-2024-6332 entry for Amelia Premium (<=7.7) and Amelia Lite (<=1.2.3) is supported by connected sources indicating a missing capability check in ameliaButtonCommand that allows unauthenticated access to employee calendar details; in the Premium version this also exposes Google Calend...
CVE-2024-5309
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the fvexportcsv, resetsettings, savesettings, savecolumnssettings, getanalyticsdata, geteventlogsdata, deletesubmissions, and...
CVE-2024-5309
CVE-2024-5309 (Form Vibes – Database Manager for Forms, WordPress) : The WordPress plugin
WordPress plugin Form Vibes 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress plugin Amelia 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-37269 · Trellix · Trellix Ips Manager
Name of the Vulnerable Software and Affected Versions: Trellix IPS Manager version 11.1.7.97 Description: This issue allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response. Recommendations:...
Remote Code Execution
mlflow is vulnerable to Remote Code Execution. The vulnerability is caused due to a defect where mflow allows to write/overwrite any file on the file system. A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2024-34648
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data...
CVE-2024-34648
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data...
CVE-2024-34643
Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability...
CVE-2024-34648
CVE-2024-34648 concerns Samsung KnoxMiscPolicy where improper handling of insufficient permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data. Affected component: KnoxMiscPolicy on Samsung mobile devices. Root cause: privilege insufficiency m...
kernel: scsi: qedi: Fix crash while reading debugfs attribute
In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...
The vulnerability of the application management tools and Flatpak environments lies in the improper elimination of special elements at the output stage, which are used by subordinate components. This allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the application management tools and Flatpak environments is related to improper elimination of special elements at the output stage, which are used by lower-level components. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromi...
The vulnerability of the cifs component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cifs component in the Linux operating system’s kernel is related to a double-race condition that occurs due to memory release during the cifsgetroot function’s mounting failure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...