5024 matches found
GHSA-WR3P-R5FJ-WF97 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-5V8F-XX9M-WJ44 vulnerabilities
Vulnerabilities for packages: trino...
libexiv2 0.28.x < 0.28.3 (GHSA-38rv-8x93-pvrh)
The version of libexiv2 installed on the remote host is prior to 0.28.3. It is, therefore, affected by a vulnerability as referenced in the GHSA-38rv-8x93-pvrh advisory. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An...
GHSA-MPG4-RC92-VX8V vulnerabilities
Vulnerabilities for packages: renovate, kubeflow-pipelines...
Docker AuthZ Plugin Bypass Vulnerability (GHSA-v23v-6jw2-98fq)
Docker is prone to an AuthZ plugin bypass vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:docker:docker";...
GHSA-C2HF-VCMR-QJRF vulnerabilities
Vulnerabilities for packages: parseable, qdrant...
GHSA-Q445-7M23-QRMW vulnerabilities
Vulnerabilities for packages: zed, pixi, sdp-k8s-injector, lychee, rustup, sccache, berg...
GHSA-JMVP-698C-4X3W vulnerabilities
Vulnerabilities for packages: argo-cd...
GHSA-CCX2-W2R4-X649
creationtimestamp| type| source ---|---|--- 2024-07-19 19:59:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1918...
CVE-2024-40633
Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve ord...
CVE-2024-40633 Customer data leak via adjustments API endpoint in Sylius
Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve ord...
CVE-2024-40633 Customer data leak via adjustments API endpoint in Sylius
Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the /api/v2/shop/adjustments/id endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve ord...
GHSA-JG6G-RRJ6-XFG6
creationtimestamp| type| source ---|---|--- 2024-07-17 10:03:32+00:00| published-proof-of-concept| https://t.me/CNArsenal/2796 2024-08-16 11:16:31+00:00| seen| https://t.me/Rootsec2/3432 2024-09-03 12:26:48+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10845...
GHSA-G5HV-R743-V8PM vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-J482-47XF-P25C vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-J482-47XF-P25C vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-4XQQ-M2HX-25V8 vulnerabilities
Vulnerabilities for packages: ruby3.2-rexml, ruby, kube-fluentd-operator, jruby...
GHSA-CX63-2MW6-8HW5 vulnerabilities
Vulnerabilities for packages: checkov, airflow, reflex, py3-pipenv, py3-cassandra-medusa, az, kubeflow-katib, superset...
MAL-2024-7446 Malicious code in footericonds (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba3e29d5f7e109bd3c7e3fad6164aa065c6932c582b75f742b4d121f3a6fd7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...