CVE-2023-27476

OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib's XML parser which supports both lxml and xml.etree does not disable entity resolution, and could lead to arbitrary file reads from an...

XWiki 3.0-milestone-1 < 13.10.10, 14.x < 14.4.5, 14.5.x < 14.8 Incorrect Authorization Vulnerability (GHSA-859x-p6jp-rc2w)

Xwiki is prone to an incorrect authorization vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki 13.x < 13.10.11, 14.x < 14.4.7, 14.5.x < 14.10 Privilege Escalation Vulnerability (GHSA-3738-p9x3-mv9r)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

XWiki 3.2-m3 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (GHSA-5cf8-vrr8-8hjm)

Xwiki is prone to an exposure of sensitive information to an unauthorized actor vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GHSA-VPVM-3WQ2-2WVM vulnerabilities

Vulnerabilities for packages: podman, ctop...

GHSA-CH7V-37XG-75PH vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H828-V5PV-33QX vulnerabilities

Vulnerabilities for packages: juicefs...

Guest-controlled out-of-bounds read/write on x86\_64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ff4p-7xrq-q5r8. For more information see the GitHub-hosted security advisory...

GHSA-Q2JF-H9JM-M7P4

creationtimestamp| type| source ---|---|--- 2023-03-01 11:31:30+00:00| seen| https://t.me/canyoupwnme/6855...

Malicious code in discord.js-hakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5488203f0727b63f8b3eb9250adce4794c1e1b02337ff5708538666a8a1aca6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-MC8H-8Q98-G5HR vulnerabilities

Vulnerabilities for packages: cbindgen, zellij...

Nextcloud Server < 23.0.12, 24.x < 24.0.8, 25.x < 25.0.2 Path Traversal Vulnerability (GHSA-273v-9h7x-p68v)

Nextcloud Server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GHSA-87X9-7GRX-M28V vulnerabilities

Vulnerabilities for packages: zot...

Python < 3.7.17, 3.8.x < 3.8.17, 3.9.x < 3.9.17, 3.10.x < 3.10.12, 3.11.x < 3.11.4 RCE Vulnerability - Mac OS X

Python is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: go, wireguard-go, hey, dynamic-localpv-provisioner, terraform-provider-sendgrid, restic, kubeflow-katib, gke-gcloud-auth-plugin, kubeflow, k3d, grpcurl...

GHSA-259W-8HF6-59C2 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-259W-8HF6-59C2 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-HMFX-3PCX-653P vulnerabilities

Vulnerabilities for packages: ctop...

Nextcloud Server < 23.0.12, 24.x < 24.0.8, 25.x < 25.0.1 Improper Access Control (GHSA-492h-596q-xr2f)

Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MAL-2023-410 Malicious code in fca-jiserdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c7c1daa39954ff43ad664a7222262a14f5fcf5e1ad3cb95db96957c750ccb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...