17606 matches found
CVE-2024-37371
A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...
CVE-2024-4901 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes...
CVE-2024-28830
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p7, 2.2.0p28, 2.1.0p45 and =2.0.0p39 EOL causes automation user secrets to be written to audit log files accessible to administrators...
MAL-2024-6469 Malicious code in activerecord-globalize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4697 Malicious code in WPF-UI-Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4675 Malicious code in Sіtіcone.Desktop.UI2 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4626 Malicious code in Reothor.Lab.EvilPackage (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4614 Malicious code in Portable.Xaml.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4588 Malicious code in OCI.DotNetSDK.Databasetools.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4544 Malicious code in MetаMаsk.Blazor (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4441 Malicious code in Celigo.Service.Manager.NetSuite (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4353 Malicious code in Bloсkcоre.Networks.Molіе (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4360 Malicious code in Blоckcore.Featսres.SignalR (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4175 Malicious code in Be.Vlaandеren.Basіsregisters.PаrcelRegistrу.Api.CrabImport (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4284 Malicious code in Be.Vlаanderen.Basisregisters.StreetNameRеgistry.Api.Oslo (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3841 Malicious code in @expue/vue3-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
HackerOne: Business Logic error leads to bypass 2FA requirement
Vulnerability description not provided...
CVE-2024-38895
WAVLINK WN551K1'livemfg.shtml enables attackers to obtain sensitive router information...
