13524 matches found
CVE-2024-6082
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attac...
CVE-2024-6082 PHPVibe Global Options Page functionalities.global.php cross site scripting
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attac...
CVE-2024-36575
A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...
AZL-42772 CVE-2024-4032 affecting package python3 for versions less than 3.12.9-1
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...
DEBIAN-CVE-2024-4032
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...
UBUNTU-CVE-2024-4032
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...
PT-2024-37372 · Phpvibe · Phpvibe
Name of the Vulnerable Software and Affected Versions: PHPVibe version 11.0.46 Description: A problematic issue has been found in the Global Options Page component, specifically in the file functionalities.global.php. The manipulation of the site-logo-text argument leads to cross-site scripting...
CVE-2024-6082: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text leads to cross site scripting. The attac...
CVE-2024-36575
A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...
PT-2024-27075 · Unknown · Getsetprop
Name of the Vulnerable Software and Affected Versions: getsetprop version 1.1.0 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via global.accessor. Recommendations: For getsetprop version 1.1.0, consider disabling access to the global.accessor until a patch ...
npm getsetprop Security Vulnerabilities
npm getsetprop is a library from the American company npm. A security vulnerability exists in npm getsetprop version 1.1.0, which originated from allowing an attacker to execute arbitrary code via global.accessor...
CVE-2024-36575
The getsetprop library (version 1.1.0 ) is vulnerable to a Prototype Pollution issue. The root cause is improper restrictions on __proto__ or constructor.prototype properties. This flaw allows an attacker to manipulate application logic, which can lead to denial of service or remote code executio...
CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
DEBIAN-CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
UBUNTU-CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
CVE-2024-38448
The htags component in GNU Global (versions through 6.6.12) is vulnerable to code execution when the dbpath (specified via the -d flag) is untrusted. This is caused by the improper handling of shell metacharacters within the path. The impact is significant as it allows for arbitrary command execu...