Lucene search
+L

2585 matches found

CNNVD
CNNVD
added 2024/03/18 12:0 a.m.9 views

Astropy Security Breach

Astropy is a Python astronomy project designed to promote interoperability between Python astronomy packages. A security vulnerability exists in Astropy version 5.3.2, which stems from an improper input validation issue in the function TranformGraph.todotgraph, leading to a remote code execution...

8.4CVSS8.1AI score0.01124EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/03/15 12:0 a.m.27 views

SUSE SLES12 Security Update : zabbix (SUSE-SU-2024:0862-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0862-1 advisory. - CVE-2024-22119: Fixed ability to run XSS in graph item names bsc1219775. Tenable has extracted the preceding description block directly fr...

5.5CVSS6.1AI score0.00659EPSS
SaveExploits1References4
Fedora
Fedora
added 2024/03/07 10:33 p.m.23 views

[SECURITY] Fedora 40 Update: dirgra-0.4-12.fc40

Simple Directed Graph Implementation...

8.8CVSS6.9AI score0.02578EPSS
SaveExploits3
OSV
OSV
added 2024/03/06 11:16 a.m.20 views

BIT-TENSORFLOW-2021-41217 Null pointer exception when `Exit` node is not preceded by `Enter` op

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

5.5CVSS5.6AI score0.00181EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2024/03/04 11:30 a.m.76 views

BloodHound - Six Degrees Of Domain Admin

BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound uses graph...

7.4AI score
SaveExploits0References9
PyPA
PyPA
added 2024/02/29 11:15 a.m.49 views

PYSEC-2024-245

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk...

5.9CVSS6.9AI score0.00345EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2024/02/27 9:45 a.m.29 views

Information Disclosure

microsoft/microsoft-graph-core is vulnerable to Information Disclosure. The vulnerability is due to the inclusion of test code that enables the use of the phpInfo function, specifically through the GetPhpInfo.php script, which can expose sensitive system information if the server is misconfigured...

5.4CVSS6.9AI score0.02203EPSS
SaveExploits0References10Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.8 views

PT-2024-40640 · Git +1 · Igraph

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: igraph dl yylex, igraph dl yyparse,...

7.4AI score
SaveExploits0References2
NVD
NVD
added 2024/02/09 9:15 a.m.21 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.4AI score0.00659EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/09 9:15 a.m.20 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.4CVSS6.9AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2024/02/09 9:15 a.m.62 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS6.9AI score0.00659EPSS
SaveExploits1
OSV
OSV
added 2024/02/09 9:15 a.m.2 views

DEBIAN-CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.4CVSS5.5AI score0.00659EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/09 9:15 a.m.3 views

UBUNTU-CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.8AI score0.00659EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/09 9:15 a.m.16 views

Input validation

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

4.9CVSS7.4AI score0.00659EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2024/02/09 9:15 a.m.29 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS6.1AI score0.00659EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/02/09 8:26 a.m.7 views

CVE-2024-22119 Stored XSS in graph items select form

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.7AI score0.00659EPSS
SaveExploits1References2
CVE
CVE
added 2024/02/09 8:26 a.m.110 views

CVE-2024-22119

CVE-2024-22119 is a stored XSS in Zabbix frontend’s graph items select form caused by improper validation of the Graph page Name field in Items. Connected advisories confirm the issue affects multiple Linux distributions (Debian, SUSE/openSUSE, AstraLinux, etc.) and report fixes in various releas...

5.5CVSS5.3AI score0.00659EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/02/09 8:26 a.m.49 views

CVE-2024-22119 Stored XSS in graph items select form

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS5.7AI score0.00659EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/02/09 8:26 a.m.62 views

CVE-2024-22119

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section...

5.5CVSS7.2AI score0.00659EPSS
SaveExploits1
Wiz blog
Wiz blog
added 2024/02/07 1:58 p.m.28 views

Wiz AI-SPM extends support to Microsoft Azure OpenAI Service models

Secure Microsoft Azure AI Services, including Azure OpenAI, with Wiz AI-SPM providing full visibility into AI pipelines and risks on the Wiz Security Graph...

7.2AI score
SaveExploits0
Rows per page
Query Builder