1207 matches found
CVE-2024-57632
An issue in the iscolumnunique component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-56374
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
[SECURITY] [DLA 4005-1] debootstrap bugfix update for testing/unstable chroots
Debian LTS Advisory DLA-4005-1 [email protected] https://www.debian.org/lts/security/ Luca Boccassi December 31, 2024 https://wiki.debian.org/LTS Package : debootstrap Version : 1.0.123+deb11u3 Debian Bug : 1091649 debootstrap has been updated to avoid pulling in usr-is-merged in testin...
CVE-2023-32586
Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1...
CVE-2023-32586
Missing Authorization vulnerability in TM Soundcloud Is Gold soundcloud-is-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through = 2.5.1...
CVE-2023-32586 WordPress SoundCloud Is Gold plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1...
CVE-2023-32586 WordPress SoundCloud Is Gold plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in TM Soundcloud Is Gold soundcloud-is-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through = 2.5.1...
CVE-2023-32586
CVE-2023-32586 concerns the WordPress SoundCloud Is Gold plugin (versions
WordPress plugin Soundcloud Is Gold 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
Malicious code in @aoflmkt/is-desktop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e1efcaba98a4db72e85c952c1936c99152081de71c2732e8189d9ad65390116 The OpenSSF Package Analysis project identified '@aoflmkt/is-desktop' @ 100.100.106 npm as malicious. It is considered malicious because: - The...
Malicious code in romeo_is_here_get-request-package_2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in react-is-17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 247abdb4fbc08d6873e144ba02bffb46eb44e39e1ac729d3564a4e1e944f5d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11074 Malicious code in react-is-17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 247abdb4fbc08d6873e144ba02bffb46eb44e39e1ac729d3564a4e1e944f5d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2024-53078
In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs ISERR check in probe The iommupagingdomainalloc function doesn't return NULL pointers, it returns error pointers. Update the check to match...
Malicious code in react-is-16 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66059d9e879f615ec449be8496988b1e02f5bfdcf0ba355c2fba23a87777b494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10775 Malicious code in react-is-16 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66059d9e879f615ec449be8496988b1e02f5bfdcf0ba355c2fba23a87777b494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2024-50243
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident attribute in ntfscreateinode rollback...
go-toolset:rhel8 security update
An update is available for module.go-toolset, go-toolset, delve, golang, module.golang, module.delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset...
Eval Injection
Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Eval Injection via the result = evals field of the iscallableexpression function in the agentscope\web\workstation\workflowutils.py file. An attacker can execute...
ROS-20241028-02
The vulnerability of the net-netip component of Golang programming language is related to incorrect operation of Is methods IsPrivate, IsLoopback, etc. methods. Exploitation of the vulnerability can allow an intruder to bypass the existing access restriction policy...