17766 matches found
CGA-34V7-9WFW-22R7
Bulletin has no description...
CGA-2GFC-GH72-7793
Bulletin has no description...
CGA-2F87-R2CR-7G69
Bulletin has no description...
CGA-2CVJ-F2MR-FC7R
Bulletin has no description...
CGA-25Q2-854Q-5HVP
Bulletin has no description...
CGA-2CV7-75Q6-CVRQ
Bulletin has no description...
CGA-43VX-58Q8-8782
Bulletin has no description...
CVE-2024-23445
A flaw was found in Elasticsearch. If a cross-cluster API key restricts the search for a given index using the query or the fieldsecurity parameter, and the same cross-cluster API key also grants replication for the same index, the search restrictions are not enforced during cross-cluster search...
CVE-2024-37279
A flaw was discovered in Kibana, allowing read-only alerting users using the runsoon API making the alerting rule run continuously. This issue potentially affects the system if the alerting rule is running complex queries...
Cross-Site Scripting in third party library mso/idna-convert
Make sure to not expose the vendor directory to the publicly accessible document root. In composer managed installation, make sure to configure a dedicated web folder. In general it is recommended to not expose the complete typo3src sources folder in the document root...
CVE-2024-5222
CVE-2024-5222: Stored XSS in the Responsive Addons WordPress plugin via the file uploader; affects all versions up to 3.0.5 and requires authentication (Author level or higher). A patch/update is available per connected disclosures; apply the vendor/maintainer update to remediate.
CVE-2022-28658
CVE-2022-28658 concerns the Apport component of Ubuntu/Linux, where argument parsing mishandles filename splitting on older kernels, enabling local argument spoofing to the Apport daemon. The issue affects Apport’s handling of certain filenames and command-line arguments, with the published CVSS ...
CVE-2022-28652
/.config/apport/settings parsing is vulnerable to "billion laughs" attack...
CVE-2023-1419
A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data...
CVE-2024-34797
CVE-2024-34797 is a Stored XSS in the WordPress plugin “Simple Popup Manager” by Benoit Mercusot. The vulnerability affects Simple Popup Manager versions from n/a up to 1.3.5, caused by improper input neutralization during web page generation. The CVE entry provides a CVSS v3.1 base score of 5.9 ...
CVE-2024-35633
CVE-2024-35633 is a Server-Side Request Forgery (SSRF) vulnerability in CreativeThemes Blocksy Companion for WordPress, affecting Blocksy Companion versions up to 2.0.42. The affected condition requires Administrator-level access; the issue is exploitable via network-based vectors and impacts con...
CVE-2024-5311
CVE-2024-5311 affects DigiWin EasyFlow .NET. The vulnerability arises from insufficient validation of certain input parameters, allowing an unauthenticated remote attacker to inject arbitrary SQL commands that can read, modify, and delete database records. The issue is rated CVSS v3.1 base score ...
CVE-2024-22058
Ivanti Endpoint Manager (EPM) versions 2021.1 and older are affected by a local buffer overflow vulnerability. A low-privilege user who has the EPM Agent installed on the local machine can potentially execute arbitrary code with elevated permissions. The public documents consistently describe the...
CVE-2024-5565
CVE-2024-5565 concerns the Vanna.AI library (Python) where prompt injection in the library’s ask API, with visualize set to True, can execute arbitrary Python code on the host, enabling remote code execution. The vulnerability arises from insufficient input validation in the prompt generation tha...