2393 matches found
UBUNTU-CVE-2024-34507
An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges%1b0000000...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400-pot Simple honeypot for CVE-2024-3400 Palo Alto...
org.apache.hugegraph:hugegraph-dist (1.0.0), org.apache.hugegraph:hugegraph-example (1.0.0) +1 more potentially affected by CVE-2024-27348 via org.apache.hugegraph:hugegraph-api (>=1.0.0, <=1.2.0)
org.apache.hugegraph:hugegraph-api MAVEN version =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2024-27348 Source advisory: GHSA-29RC-VQ7F-X335...
org.apache.hugegraph:hugegraph-dist (1.0.0), org.apache.hugegraph:hugegraph-example (1.0.0) +1 more potentially affected by CVE-2024-27348 via org.apache.hugegraph:hugegraph-api (>=1.0.0, <=1.2.0)
org.apache.hugegraph:hugegraph-api MAVEN version =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2024-27348 Source advisory: OSV:GHSA-29RC-VQ7F-X335...
org.apache.hugegraph:hugegraph-dist (1.0.0), org.apache.hugegraph:hugegraph-example (1.0.0) +1 more potentially affected by CVE-2024-27349 via org.apache.hugegraph:hugegraph-api (>=1.0.0, <=1.2.0)
org.apache.hugegraph:hugegraph-api MAVEN version =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2024-27349 Source advisory: MEND:CVE-2024-27349...
Malware in teleport-app-example-node
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Exploit for Deserialization of Untrusted Data in Torrentpier
CVE-2024-1651 This CVE was discovered by Carlos Bello from the...
com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2023-6787 via org.keycloak:keycloak-services (15.1.0)
org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...
org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.5.3)
org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...
BIT-AIRFLOW-2020-11978
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler depending o...
BIT-AIRFLOW-2022-40127 Apache Airflow <2.4.0 has an RCE in a bash example
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0...
CVE-2024-0864 RCE in Laragon
Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution RCE attack via an improper input validation in a fileupload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-27906 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-27906 Source advisory:...
com.liferay.arquillian:com.liferay.arquillian.arquillian-liferay-extension-example (>=1.0.4, <=1.0.8), com.liferay.portal:com.liferay.util.bridges (2.0.1) potentially affected by CVE-2024-25606 via com.liferay.portal:com.liferay.util.java (2.0.1)
com.liferay.portal:com.liferay.util.java MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.util.java and may be impacted: -...
com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.3.27.final)
io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...
io.nixer:nixer-plugin-captcha (>=0.1.0.0, <=0.1.1.3), io.nixer:nixer-plugin-core (>=0.1.0.0, <=0.1.1.3) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (7.5.1)
com.nimbusds:nimbus-jose-jwt MAVEN version 7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - io.nixer:nixer-plugin-captcha =0.1.0.0, =0.1.0.0, =0.1.0.0, =0.1.1.0, =0.1.1.3 Source cves:...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-50943 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-50943 Source advisory:...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-50943 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-50943 Source advisory:...