17765 matches found
CVE-2023-39328
A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...
CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...
CVE-2024-6501
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service...
CVE-2024-36421 GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts
Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A CORS misconfiguration sets the Access-Control-Allow-Origin header to all, allowing arbitrary origins to connect to the website. In the default configuration unauthenticated,...
HackerOne: Private data related to program exposed via /reports/<id>.json endpoint to external user participant
Vulnerability description not provided...
CGA-JVFH-392W-C357
Bulletin has no description...
CVE-2024-37370
A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...
CVE-2024-37371
A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...
CVE-2024-4901 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes...
CVE-2024-28830
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p7, 2.2.0p28, 2.1.0p45 and =2.0.0p39 EOL causes automation user secrets to be written to audit log files accessible to administrators...
MAL-2024-6469 Malicious code in activerecord-globalize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4697 Malicious code in WPF-UI-Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4675 Malicious code in Sіtіcone.Desktop.UI2 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4626 Malicious code in Reothor.Lab.EvilPackage (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4614 Malicious code in Portable.Xaml.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4588 Malicious code in OCI.DotNetSDK.Databasetools.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4544 Malicious code in MetаMаsk.Blazor (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4441 Malicious code in Celigo.Service.Manager.NetSuite (NuGet)
--- -= Per source details. Do not edit below this line.=-...