CVE-2024-20906

...

CVE-2023-21901

...

CVE-2023-21901

...

CVE-2023-6336

CVE-2023-6336 affects HYPR Workforce Access on macOS. The vulnerability is an improper Link Resolution Before File Access ("Link Following"), allowing a user-controlled filename to influence file access. Public sources consistently describe the issue as affecting HYPR Workforce Access prior to ve...

CVE-2023-4703

CVE-2023-4703 affects All in One B2B for WooCommerce (WordPress plugin) up to version 1.0.3. The vulnerability arises from improper validation of parameters when updating user details, enabling an unauthenticated attacker to update details for any user. The PoC shows a curl example that updates a...

CVE-2024-0584

Rejected reason: Do not use this CVE as it is duplicate of CVE-2023-6932...

EulerOS 2.0 SP11 : python-requests (EulerOS-SA-2023-2665)

According to the versions of the python-requests package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when...

CVE-2019-2945

creationtimestamp| type| source ---|---|--- 2024-01-15 08:11:12+00:00| seen| https://t.me/ctinow/168197...

CVE-2023-48383

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2023-51804

CVE-2023-51804 affects rymcu forest v0.02. The vulnerability exists in the com.rymcu.forest.web.api.common.UploadController where manipulation of the HTTP body URL enables a remote attacker to obtain sensitive information. Initial metrics indicate CVSSv3.1 base score 7.5 (High) with Attack Vector...

CVE-2023-49261

CVE-2023-49261: Red Hat entries confirm the issue that the tokenKey used in user authorization is visible in the HTML source of the login page. The Red Hat advisories list this description; the connected documents do not provide affected product/version details, exploit information, or remediatio...

CVE-2023-49568 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitness, scorecard, nuclei, src-fingerprint, flux-kustomize-controller, zot, gomplate, kubevela, pulumi, gitsign, goreleaser, pulumi-language-dotnet, apko, go-licenses, pulumi-language-java, kots, pulumi-kubernetes-operator, bom...

CVE-2024-21613

CVE-2024-21613 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is a Missing Release of Memory after Effective Lifetime in the Routing Protocol Daemon (RPD) that, when traffic engineering is enabled for OSPF or ISIS and a link flap occurs, causes a patroot memory leak leading to ...

PT-2024-19001 · Unknown · Rubygems.Org

Name of the Vulnerable Software and Affected Versions: Rubygems.org affected versions not specified Description: The issue concerns a workaround on the forgotten password form of Rubygems.org, which allows an attacker to bypass the Multi-Factor Authentication MFA requirement. Normally, users with...

CVE-2023-51790

CVE-2023-51790 affects piwigo v14.0.0, specifically the Admin Tools plug-in’s lang parameter, which is exposed to enable a cross-site scripting (XSS) vulnerability. The connected sources consistently describe an XSS that could allow a remote attacker to obtain sensitive information. The primary d...

CVE-2024-23172

CVE-2024-23172 affects MediaWiki’s CheckUser extension. Affected versions are: MediaWiki before 1.35.14; 1.36.x through 1.39.x before 1.39.6; and 1.40.x before 1.40.2. Root cause is an XSS in message definitions, e.g., in SpecialCheckUserLog . The vulnerability could enable a remote attacker to p...

Microsoft SharePoint Exposed Web Services

Due to a misconfiguration in Microsoft SharePoint Server. An attacker with anonymous privileges can access to the SharePoint web services page. No source data...

CVE-2023-42828

This CVE (CVE-2023-42828) is tied to macOS crontabs and a lack of access control that may allow a local attacker to gain root privileges. PT-2023-8342 describes the root cause in crontabs, noting macOS Ventura 13.5 fixes this by removing the vulnerable code. Affected product/version: macOS Ventur...

CVE-2022-32931

CVE-2022-32931 affects macOS Ventura 13; the issue allowed an app with root privileges to access private information. Apple patched this by addressing data protection shortcomings in Ventura 13. Remediation: update to macOS Ventura 13 (or later) where the fix is implemented. All other details in ...

CVE-2023-47171

CVE-2023-47171 affects WWBN AVideo 11.6 and the dev master (commit 15fed957fb). TALOS documents an information disclosure via the aVideoEncoder.json.php chunkFile path functionality, allowing an attacker to read arbitrary files by supplying a crafted chunkFile parameter in an HTTP request. The ad...