68771 matches found
LightRAG <= 1.5.4 - Missing Authentication
LightRAG through version 1.5.4 contains a broken access control vulnerability caused by the API server binding to all network interfaces with authentication disabled, letting unauthenticated network attackers fully control indexed documents and resources, exploit requires network access. id:...
MINI-784V-25VJ-J7RJ
Bulletin has no description...
MINI-65Q8-XJQ9-HMRP
Bulletin has no description...
MINI-R245-H43Q-Q7JP
Bulletin has no description...
MINI-QRHC-Q86M-VGF4
Bulletin has no description...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
MINI-2C82-XVWG-QGRP
Bulletin has no description...
MINI-5RHW-JGVF-74X5
Bulletin has no description...
MINI-C7P7-3V4X-6QQ2
Bulletin has no description...
MINI-W63F-6RQV-QP97
Bulletin has no description...
MINI-9RRR-JJQ3-H65Q
Bulletin has no description...
MINI-66XV-9G3H-FCJH
Bulletin has no description...
EUVD-2024-55722
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
CVE-2024-58375
OpenTofu 1.8.0–1.8.2 do not properly restrict sensitive variables/locals when static evaluation is enabled, allowing potential leakage of values marked as sensitive through configuration elements. The issue is resolved in OpenTofu 1.8.3, which adds explicit errors to prevent use of sensitive valu...
CVE-2024-58375 OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
MINI-78JH-C86C-V983
Bulletin has no description...
MINI-R5JF-XFGM-G3PV
Bulletin has no description...