CVE-2024-52290

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

CVE-2024-39897

CVE-2024-39897 affects Zot’s registry code (zot) prior to 2.1.0. The cache driver GetBlob() can read any blob without an access check, enabling an attacker who knows an image name and a blob digest (to which they have no read access) to read that blob via another repository that the attacker can ...

freerdp: Out of bound read in update_recv could result in a crash

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...