5014 matches found
GHSA-MQ26-G339-26XF vulnerabilities
Vulnerabilities for packages: jwt-tool, k8s-sidecar...
GHSA-MM8H-8587-P46H vulnerabilities
Vulnerabilities for packages: cassandra-reaper, trino...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Sofia-SIP vulnerability (USN-6448-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6448-1 advisory. Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker coul...
CVE-2023-41899
Home Assistant Core vulnerability CVE-2023-41899: a partial SSRF in the hassio.addon_stdin service allows an attacker who can call that service (e.g., via GHSA-h2jp-7grc-9xpp) to invoke any Supervisor REST API endpoints through a POST request. An exploited attacker can control the data dictionary...
CVE-2023-41899 Partial Server-Side Request Forgery in Home Assistant Core
Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...
GHSA-FR2G-9HJM-WR23 vulnerabilities
Vulnerabilities for packages: nats...
Redis Unix Socket Permission Access Bypass Vulnerability (GHSA-ghmp-889m-7cvx)
Redis is prone to a vulnerability that allows to bypass desired Unix socket permissions on startup. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Nextcloud Server 25.x < 25.0.8, 26.x < 26.0.3, 27.x < 27.0.1 Improper Access Control Vulnerability (GHSA-hhgv-jcg9-p4m9)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nextcloud Server < 22.2.10.16, 23.x < 23.0.12.11, 24.x < 24.0.12.7, 25.x < 25.0.11, 26.x < 26.0.6, 27.x < 27.1.0 Improper Access Control Vulnerability (GHSA-xmhp-7vr4-hp63)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nextcloud Server < 22.2.10.14, 23.x < 23.0.12.9, 24.x < 24.0.12.5, 25.x < 25.0.9, 26.x < 26.0.4 Improper Access Control Vulnerability (GHSA-2hrc-5fgp-c9c9)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MAL-2023-8340 Malicious code in fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7597210d8449795cfeb232c861661dd973e59c2d8e561d96acadf84c6b773d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, k3s, k8sgpt-operator, terraform-provider-sendgrid, aws-load-balancer-controller, kpt, aws-efs-csi-driver, buildkitd, kubernetes-dashboard, wireguard-go, prometheus-pushgateway, runc, terraform, oauth2-proxy, gobuster, flux, timoni, skaffold,...
GHSA-7286-PGFV-VXVH vulnerabilities
Vulnerabilities for packages: trino...
GHSA-7286-PGFV-VXVH vulnerabilities
Vulnerabilities for packages: trino...
GHSA-622H-H2P8-743X vulnerabilities
Vulnerabilities for packages: neuvector-controller...
Zope Information Disclosure Vulnerability (GHSA-8xv7-89vj-q48c)
Zope is prone to an information disclosure vulnerability through Python SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zope:zope...
Zope XSS Vulnerability (GHSA-wm8q-9975-xh5v)
Zope is prone to a cross-site scripting XSS vulnerability with SVG images. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-V845-JXX5-VC9F vulnerabilities
Vulnerabilities for packages: dask-gateway, py3-urllib3, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-volumes-web-app, kube-downscaler...
Malicious code in fca-rebel-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b16fd5704b976681c8db55a38f76be6ba66ec571b41cc624d49b7a3f3c05aaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...