1243 matches found
BIT-CILIUM-2022-29178 Incorrect Default Permissions in Cilium
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...
BIT-CILIUM-OPERATOR-2022-29178 Incorrect Default Permissions in Cilium
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...
Grafana directory traversal for .cvs files
Today we are releasing Grafana 8.3.2 and 7.5.12. This patch release includes a moderate severity security fix for directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability i...
GitHub: CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositories
...
GHSA-WFM5-V35H-VWF4
creationtimestamp| type| source ---|---|--- 2024-05-14 01:13:35+00:00| published-proof-of-concept| https://t.me/CNArsenal/2483...
CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability
gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...
CVE-2024-31457
Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...
CVE-2024-30252 GitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015`
Livemarks is a browser extension that provides RSS feed bookmark folders. Versions of Livemarks prior to 3.7 are vulnerable to cross-site request forgery. A malicious website may be able to coerce the extension to send an authenticated GET request to an arbitrary URL. An authenticated request is ...
GHSA-PMF3-C36M-G5CF
creationtimestamp| type| source ---|---|--- 2024-03-19 21:16:11+00:00| seen| https://t.me/ctinow/211934...
GHSA-PHG6-44M7-HX3H
creationtimestamp| type| source ---|---|--- 2024-03-14 21:46:43+00:00| seen| https://t.me/ctinow/208193...
GHSA-G627-R579-RW35
creationtimestamp| type| source ---|---|--- 2024-03-13 21:56:44+00:00| seen| https://t.me/ctinow/207190...
GHSA-GF8P-V3G3-3WPH
creationtimestamp| type| source ---|---|--- 2024-03-13 15:17:10+00:00| seen| https://t.me/ctinow/206766...
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...
GHSA-95RX-M9M5-M94V ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
ASA-2024-006: ValidateVoteExtensions helper function may allow incorrect voting power assumptions Component: Cosmos SDK Criticality: High Affected Versions: Cosmos SDK versions = 0.50.4, on 0.50 branches Affected Users: Chain developers, Validator and Node operators Impact: Elevation of Privilege...
GHSA-35JJ-WX47-4W8R
creationtimestamp| type| source ---|---|--- 2024-03-08 21:52:10+00:00| seen| https://t.me/ctinow/203609...
GHSA-C5Q2-7R4C-MV6G
creationtimestamp| type| source ---|---|--- 2024-03-08 00:07:20+00:00| seen| https://t.me/ctinow/202895 2025-02-13 19:15:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4311...
GHSA-MR9J-QQJH-67F2
creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:37+00:00| seen| https://t.me/ctinow/201795...
GHSA-RV35-69FF-G9GV
creationtimestamp| type| source ---|---|--- 2024-03-06 20:46:35+00:00| seen| https://t.me/ctinow/201793...
BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...