GHSA-CGWF-W82Q-5JRR vulnerabilities

Vulnerabilities for packages: trino, opensearch...

MAL-2023-8105 Malicious code in purplebricks-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8044c661c6223ef46436635423b8c74bbebf2796ae2252435a5592288dceca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-P25M-JPJ4-QCRR vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator...

GHSA-P25M-JPJ4-QCRR vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator...

GHSA-J7HP-H8JX-5PPR vulnerabilities

Vulnerabilities for packages: libwebp...

OpenRefine Remote Code execution in project import with mysql jdbc url attack

Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...

GHSA-M4HF-6VGR-75R2 vulnerabilities

Vulnerabilities for packages: k3s...

Exploit for OS Command Injection in Opentsdb

opentsdbkeycmdinjection An exploit for OpenTSDB -l -p -...

XWiki 7.2 < 14.10.10, 15.0-rc-1 < 15.4 Code Injection Vulnerability (GHSA-m5m2-h6h9-p2c8)

XWiki is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

GHSA-2PXW-R47W-4P8C vulnerabilities

Vulnerabilities for packages: minio...

GHSA-2PXW-R47W-4P8C vulnerabilities

Vulnerabilities for packages: minio...

Malicious code in dm_commons_utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7e98ec9d9941dfc5ed7191701e3de0b1daccd66430b4ae3211bdb9be61e4377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-2GGP-CMVM-F62F

creationtimestamp| type| source ---|---|--- 2023-08-28 22:47:21+00:00| published-proof-of-concept| https://t.me/MrVGunz/877...

XWiki 2.5-m-1 < 14.4.8, 14.5 < 14.10.6, 15.0-rc-1 < 15.2 Privilege Escalation Vulnerability (GHSA-7954-6m9q-gpvf)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

XWiki < 14.10.9, 15.0-rc-1 < 15.4 Improper Access Control Vulnerability (GHSA-8xhr-x3v8-rghj)

XWiki is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki 4.3-milestone-2 < 14.10.5 Privilege Escalation Vulnerability (GHSA-5mf8-v43w-mfxp)

XWiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

XWiki 4.1-milestone-2 < 14.10.5 XSS Vulnerability (GHSA-h8cm-3v5f-rgp6)

XWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

GHSA-CR5Q-6Q9F-RQ6Q vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator...

rustls-webpki: CPU denial of service in certificate path building

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building. Both TLS clients and TLS servers that accept client certificate are affected. We now give each path building operation...

Duplicate Advisory: Wallabag user can reset data unintentionally

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p8gp-899c-jvq9. This link is maintained to preserve external references. Original Description Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...