CVE-2024-5652: Uncontrolled Resource Consumption

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode...

CVE-2024-38071: Buffer Over-read

Windows Remote Desktop Licensing Service Denial of Service Vulnerability...

CVE-2024-25639

Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scripting XSS via Prompt Injection from untrusted documents either indexed by the user on Khoj or read by...

CVE-2024-25639 Prompt Injection triggered XSS vulnerability in Khoj Obsidian, Desktop and Web clients

Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scripting XSS via Prompt Injection from untrusted documents either indexed by the user on Khoj or read by...

CVE-2024-25639: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scripting XSS via Prompt Injection from untrusted documents either indexed by the user on Khoj or read by...

SUSE: Security Advisory (SUSE-SU-2024:2308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-23998

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

CVE-2024-23998

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

CVE-2024-23998

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

CVE-2024-23998

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

Another Redis Desktop Manager Security Vulnerability

Another Redis Desktop Manager is a fast, useful and stable Redis desktop management client for qii404 individual developers. A security vulnerability exists in Another Redis Desktop Manager version 1.6.1 and earlier versions, which stems from a cross-site scripting vulnerability in...

CVE-2024-23998

goanother CVE-2024-23998 affects Another Redis Desktop Manager

CVE-2024-23998: Improper Neutralization of Input During Web Page Generation

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

SUSE: Security Advisory (SUSE-SU-2024:2283-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Screen Saver may not produce desired animation or image in ICA desktop session

Windows Screen Saver e.g. C:\Windows\System32\ssText3d.scr may not be able to produce the desired animation when it is initiated in ICA desktop session. Instead, a white or black screen could be presented...

SUSE Enterprise Linux SEoL (9.4.x)

According to its version, SUSE Enterprise Linux is 9.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 8090...

Moderate: Red Hat Security Advisory: libreoffice security update

An update for libreoffice is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

The vulnerability of the createinstallmedia component in the Parallels Desktop hypervisor allows a malicious user to elevate their privileges to the root level.

The vulnerability of the createinstallmedia component in Parallels Desktop Hypervisor Edition is related to the lack of signature verification. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level using the repackosxinstallapp.sh script...

MAL-2024-7058 Malicious code in kiln-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kiln-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...