CVE-2024-45314 Flask-AppBuilder login form allows browser to cache sensitive fields

Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If...

CVE-2024-45314

Removed by vendor...

BIT-HUBBLE-UI-2022-29178

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...

BIT-CILIUM-PROXY-2022-29178

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...

CVE-2024-3924 Code Injection in huggingface/text-generation-inference

A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...

BIT-CILIUM-2022-29178 Incorrect Default Permissions in Cilium

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...

BIT-CILIUM-OPERATOR-2022-29178 Incorrect Default Permissions in Cilium

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...

GHSA-WFM5-V35H-VWF4

creationtimestamp| type| source ---|---|--- 2024-05-14 01:13:35+00:00| published-proof-of-concept| https://t.me/CNArsenal/2483...

CVE-2024-31457

Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...

CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

GHSA-PMF3-C36M-G5CF

creationtimestamp| type| source ---|---|--- 2024-03-19 21:16:11+00:00| seen| https://t.me/ctinow/211934...

GHSA-PHG6-44M7-HX3H

creationtimestamp| type| source ---|---|--- 2024-03-14 21:46:43+00:00| seen| https://t.me/ctinow/208193...

GHSA-G627-R579-RW35

creationtimestamp| type| source ---|---|--- 2024-03-13 21:56:44+00:00| seen| https://t.me/ctinow/207190...

GHSA-GF8P-V3G3-3WPH

creationtimestamp| type| source ---|---|--- 2024-03-13 15:17:10+00:00| seen| https://t.me/ctinow/206766...

GHSA-95RX-M9M5-M94V ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...

ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...

GHSA-35JJ-WX47-4W8R

creationtimestamp| type| source ---|---|--- 2024-03-08 21:52:10+00:00| seen| https://t.me/ctinow/203609...

GHSA-C5Q2-7R4C-MV6G

creationtimestamp| type| source ---|---|--- 2024-03-08 00:07:20+00:00| seen| https://t.me/ctinow/202895 2025-02-13 19:15:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4311...

GHSA-MR9J-QQJH-67F2

creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:37+00:00| seen| https://t.me/ctinow/201795...

BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...