5025 matches found
XWiki 1.8 < 15.10.9, 16.0.0-rc-1 < 16.3.0 Information Disclosure Vulnerability (GHSA-pvmm-55r5-g3mm)
Xwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, thingsboard, kubeflow-centraldashboard...
GHSA-CM22-4G7W-348P vulnerabilities
Vulnerabilities for packages: argo-workflows, sqlpad, kubeflow-centraldashboard, kubeflow-pipelines...
GHSA-QW6H-VGH9-J6WX vulnerabilities
Vulnerabilities for packages: argo-workflows, sqlpad, kubeflow-centraldashboard, kubeflow-pipelines...
GHSA-H4VV-H3JQ-V493
creationtimestamp| type| source ---|---|--- 2024-09-10 14:14:20+00:00| seen| https://t.me/cvedetector/5225...
CVE-2024-45845
Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instead of this record. All references and descriptions in this record have been removed to prevent...
GHSA-G4GC-RH26-M3P5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-4JCV-VP96-94XR
creationtimestamp| type| source ---|---|--- 2024-09-09 14:48:44+00:00| published-proof-of-concept| https://t.me/HackerArsenal/305 2024-09-09 14:49:02+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/791 2024-09-10 17:44:13+00:00| published-proof-of-concept|...
GHSA-92XG-GMRQ-5C3W vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-C392-WHPC-VFPR vulnerabilities
Vulnerabilities for packages: airflow...
Malicious code in afe-base-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9b3e47c7f9d396588edbd5f28fa386e74d8ae03700234402643bd0041c09c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-H4GH-QQ45-VH27 vulnerabilities
Vulnerabilities for packages: dask-gateway, ggshield, py3-cassandra-medusa, reflex, superset, airflow, az, mitmproxy, patroni, py3-cryptography, confluent-docker-utils...
GHSA-V26R-4C9C-H3J6 vulnerabilities
Vulnerabilities for packages: cargo-audit, cargo-c, starship...
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Summary Pimcore 10.6.x and Enterprise 10.6.x versions currently depend on PHPOffice/PhpSpreadsheet version 1.x, which has recently been identified with a security vulnerability CVE-2024-45048. To mitigate this issue, it is recommended to update to the latest version 2.2.2. For more details, pleas...
MAL-2024-8312 Malicious code in @diotoborg/eum-unde-sint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942e5401c00bc27645c2f6fc248331eb29ae92490f6ec1ebc42518056f9d3aa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8215 Malicious code in @diotoborg/delectus-recusandae-aut (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78f547ac27debac00546d526e8d5ef4c10c115489dd8dd86dd0ee127bbdfc3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8507 Malicious code in @diotoborg/omnis-explicabo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e2c816588966c9e43c0456254f94eabf232442670cee94bfd35d0ba9ebac050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8276 Malicious code in @diotoborg/earum-consequuntur (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43415ad621f6d59b875a092778fd84bbd7f5ac30e956fae61bc7eb3f61f7b194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...