5014 matches found
XWiki < 14.8 XSS Vulnerability (GHSA-vxf7-mx22-jr24)
Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
XWiki 1.8 < 14.6 XSS Vulnerability (GHSA-c885-89fw-55qr)
Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
XWiki 7.4.4 < 14.10.3 Code Injection Vulnerability (GHSA-jgrg-qvpp-9vwr)
Xwiki is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...
GHSA-W33C-445M-F8W7 vulnerabilities
Vulnerabilities for packages: trino, knative-kafka-broker, s3proxy-fips, thingsboard, s3proxy, wavefront-proxy...
GHSA-W33C-445M-F8W7 vulnerabilities
Vulnerabilities for packages: wavefront-proxy, trino, thingsboard...
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Impact RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generator expressions, which are allowed inside RestrictedPython. An attacker with access to a RestrictedPython environment can write code that gets the...
GHSA-WQC8-X2PR-7JQH RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Impact RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generator expressions, which are allowed inside RestrictedPython. An attacker with access to a RestrictedPython environment can write code that gets the...
GHSA-9HXF-PPJV-W6RQ vulnerabilities
Vulnerabilities for packages: wavefront-proxy...
GHSA-WMG5-G953-QQFW vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-9MH8-9J64-443F vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-CFGP-2977-2FMM vulnerabilities
Vulnerabilities for packages: wavefront-proxy...
GHSA-HR8G-6V94-X4M9 vulnerabilities
Vulnerabilities for packages: gradle, druid, tez...
MAL-2023-136 Malicious code in blossom-flex-ui-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45835a19933049983c803d03cb5c9fe34157fa2a4d00823f43d60983bbc79966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-417 Malicious code in fca-rqzax (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c98a4aa34af7d5974aa6af6ad233eb8eba8a665b37369c4dfb0608bbe979ea2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-CGCV-5272-97PR vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver...
GHSA-72XF-G2V4-QVF3 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, py3-captum...
CVE-2023-36807
CVE-2023-36807 affects the PyPDF2/pypdf library. In version 2.10.5, crafting a malformed PDF can trigger an infinite loop in reading objects, blocking the process and fully using one CPU core. The root cause is in the object reader path (read_object) used to parse PDF objects. A fix was merged in...
GHSA-GM2G-2XR9-PXXJ vulnerabilities
Vulnerabilities for packages: tctl...
