BIT-MLFLOW-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command 'Command Injection' within the mlflow.data.httpdatasetsource.py module. Specifically, when loading a dataset from a source URL with an HTTP...

Vulnerabilities fixed in Gitlab Enterprise Edition and Community Edition

GitLab has fixed vulnerabilities in Enterprise Edition EE and Community Edition CE. A malicious party could exploit the vulnerabilities to cause a denial-of-service, gain access to sensitive data, or execute code in the context of another user, potentially including users with administrator...

Revic Optics Revic Ops 安全漏洞

Revic Optics Revic Ops is a free ballistic calculator from Revic Optics. A security vulnerability exists in Revic Optics Revic Ops version 1.12.5, which stems from the inclusion of a vulnerability that would allow a remote attacker to obtain sensitive information through the firmware update proce...

LEDVANCE com.ledvance.smartplus.eu 安全漏洞

LEDVANCE com.ledvance.smartplus.eu is a firmware program from LEDVANCE. A security vulnerability exists in LEDVANCE com.ledvance.smartplus.eu version 2.1.10, which originated from the inclusion of a vulnerability that could allow a remote attacker to obtain sensitive information through the...

CVE-2024-47084 CORS origin validation is not performed when the request has a cookie in Gradio

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to CORS origin validation, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests to a local Gradio...

WordPress plugin UserPlus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Vulnerabilities fixed in Adobe Commerce and Magento

Adobe has fixed vulnerabilities in Commerce and Magento. The vulnerabilities allow a malicious person to launch attacks that result in the following categories of damage: Circumvention of security measure Accessing sensitive data Access to system data Increased user privileges Remote code executi...

The vulnerability of the TextFile.Open method in the data collection and process control tools for industrial automation, LAquis SCADA, allows a intruder to gain access to read, modify, or delete data, or execute arbitrary code.

The vulnerability of the TextFile.Open method in the data collection and process control tools of the industrial automation monitoring system LAquis SCADA is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow an attack...

HCL Connections 安全漏洞

HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections that stems from vulnerability to an information disclosure vulnerability that allows users to access sensitive information to which they are not entitled...

CentOS 7 : java-1.7.1-ibm (RHSA-2022:4957)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4957 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected ar...

CVE-2024-47822 Directus inserts access token from query string into logs

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...

CVE-2024-47822 Directus inserts access token from query string into logs

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially exposed in system logs which may be persisted. The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are no...

CVE-2024-47822

CVE-2024-47822 – Directus : The issue arises from access tokens in query strings not being redacted when LOG_STYLE is set to raw, allowing potential exposure of long‑lived tokens in system logs. This could enable an attacker with log access to gain administrative control or perform unauthorized d...

CVE-2024-9574

SQL injection vulnerability in SOPlanning 1.45, via /soplanning/www/usergroupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB...

The vulnerability of the sun6i component of the Linux operating system’s kernel allows a hacker to gain unauthorized access to confidential information within the system.

The vulnerability of the sun6i component in the Linux operating system’s kernel is related to competitive access to resources a state of competition. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

VulnCheck KEV: CVE-2024-9014

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data...

The vulnerability of the parseProxyProtocolV1() function in the ProxyProtocolReadListener class of the Undertow web server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the parseProxyProtocolV1 function in the ProxyProtocolReadListener class of the Undertow web server is related to the synchronization of requests and responses when processing the StringBuilder parameter. Exploiting this vulnerability can allow a remote attacker to gain...

Exploit for CVE-2023-1874

CVE-2023-1874 Disclaimer THIS SCRIPT IS DESIGNED FOR WHIT...

CVE-2024-47651

This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple “userid” parameters in the API request body leading to unauthorized access of sensitive...

PT-2024-29430 · Cadclick · Cadclick

Name of the Vulnerable Software and Affected Versions: CADClick versions 1.11.0 and earlier Description: A SQL Injection issue in "ccHandler.aspx" allows remote attackers to execute arbitrary SQL commands via the bomid parameter. This enables attackers to potentially access or manipulate sensitiv...