4763 matches found
CVE-2022-24760
The set of connected sources confirms CVE-2022-24760 is a real vulnerability in Parse Server (pre-4.10.7) caused by prototype pollution in DatabaseController.js, enabling Remote Code Execution with default MongoDB configurations on Linux/Windows. Impact is described as RCE (high severity) with a ...
CVE-2022-24760 Command Injection in Parse server
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...
Nextcloud Server < 21.0.8, 22.x < 22.2.4, 23.x < 23.0.1 DoS Vulnerability (GHSA-jf3h-xf4q-mh89)
Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
dalineunit (>=0.0.31 <=0.0.69), encapsia-cli (>=0.1.8 <=0.5.1) +5 more potentially affected by CVE-2022-24737 via httpie (>=1.0.3 <=2.6.0)
httpie PYPI version =1.0.3, =0.0.31, =0.1.8, =0.0.14, =1.0.0, =1.3.21, =1.9.24 - veracode-api-signing =21.3.0 Source cves: CVE-2022-24737 Source advisory: OSV:GHSA-9W4W-CPC8-H2FQ...
GHSA-CRP2-QRR5-8PQ7 vulnerabilities
Vulnerabilities for packages: ctop...
GHSA-CRP2-QRR5-8PQ7 vulnerabilities
Vulnerabilities for packages: ctop...
GHSA-GV9J-4W24-Q7VX vulnerabilities
Vulnerabilities for packages: juicefs, coredns-fips...
OpenMRS 1.6 - 2.5.x Directory Traversal Vulnerability (GHSA-8rgr-ww69-jv65)
OpenMRS is prone to a directory traversal vulnerability in the startup filter. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
Ruby on Rails Information Disclosure Vulnerability (GHSA-wh98-p28r-vrc9) - Windows
Ruby on Rails is prone to an information disclosure vulnerability in Action Pack. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Linux
Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Windows
Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
auto-wasi (=0.1.0), ceres-executor (>=0.1.0 <=0.2.0) +43 more potentially affected by CVE-2022-23636 +1 more via wasmtime (>=0.10.0 <=0.33.0)
wasmtime CARGO version =0.10.0, =0.1.0, =0.40.1, =0.45.0, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.8.0, =0.8.0, =0.9.0 - tc-executor-wasmtime =0.8.0 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:GHSA-88XQ-W8CQ-XFG7...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner...
GHSA-QRRC-WW9X-R43G vulnerabilities
Vulnerabilities for packages: beats-fips, beats...
GHSA-WF43-55JJ-VWQ8 vulnerabilities
Vulnerabilities for packages: etcd, etcd-fips, dgraph...
Duplicate Advisory: TLS certificate validation error in mellium.im/xmpp
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h289-x5wc-xcv8. This link is maintained to preserve external references. Original Description In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket...
GHSA-F5PG-7WFW-84Q9 vulnerabilities
Vulnerabilities for packages: mattermost-fips, harbor, k3d, grafana, kube-arangodb, loki, opentelemetry-collector-k8s, rancher-agent, external-secrets-operator-fips, gatekeeper-fips, terraform, mattermost, cluster-autoscaler-fips, harbor-fips, gatekeeper, argo-cd-fips, tigera-operator, consul,...
GHSA-F5PG-7WFW-84Q9 vulnerabilities
Vulnerabilities for packages: loki, kube-arangodb, argo-cd, k3d, mattermost, opentelemetry-collector, kots, grafana, zot, external-secrets-operator, gatekeeper, cloud-sql-proxy, cluster-autoscaler...