5025 matches found
GHSA-XRM2-M72W-W4X4
creationtimestamp| type| source ---|---|--- 2024-11-15 21:24:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113489075470257480...
GHSA-7Q7G-4XM8-89CQ vulnerabilities
Vulnerabilities for packages: eslint...
GHSA-P2H2-3VG9-4P87 vulnerabilities
Vulnerabilities for packages: gh...
GHSA-C3HJ-HG7P-RRQ5
creationtimestamp| type| source ---|---|--- 2024-11-14 15:38:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113482052715292248...
GHSA-JV82-75FH-23R7 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-6X36-QXMJ-RV4P vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-XQ3W-V528-46RV vulnerabilities
Vulnerabilities for packages: apicurio-registry, keycloak, sonarqube...
Duplicate Advisory: .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references. Original Description .NET and Visual Studio Remote Code Execution Vulnerability...
MAL-2024-10618 Malicious code in launchpad-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b1c1a2444b5a8db795db02aedebf9d8feddb28e3bc8cafcf438c5d8a086f315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-99W6-3XPH-CX78 vulnerabilities
Vulnerabilities for packages: py3-ansible-core...
CVE-2024-52007
CVE-2024-52007 is an XXE vulnerability in XSLT parsing within the HAPI FHIR org.hl7.fhir.core components. The issue arises from XML external entity injections when processing XML with a malicious DTD, potentially allowing host data to be exposed. The Red Hat advisory notes this is fixed by upgrad...
CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...
CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...
CVE-2024-52002 Cross-Site Request Forgery (CSRF) in several iTop pages
Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery CSRF vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There a...
GHSA-3XGQ-45JJ-V275 vulnerabilities
Vulnerabilities for packages: argo-workflows, node-gyp, tileserver-gl, lerna, renovate, eslint, sqlpad, kubeflow-katib, ts-patch...
Malicious code in tokns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d699f5510ffd3f8f8d446b0f65dab08ec2c796a5dc8d3889f338825f2a0ea162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-JJPH-C25G-5C7G
creationtimestamp| type| source ---|---|--- 2024-11-07 18:08:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113443005872447427...
GHSA-9MQ5-349X-X427
creationtimestamp| type| source ---|---|--- 2024-11-07 18:08:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113443005858730142...