30193 matches found
GHSA-FMJ5-WV96-R2CH vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-3XRR-7M6P-P7XH vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-2X83-R56G-CV47 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2025-29795
CVE-2025-29795 describes an elevation-of-privilege vulnerability in Microsoft Edge (Chromium-based) due to improper link resolution before file access ("link following"). An authorized attacker could trigger local privilege escalation. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I...
GHSA-HHM6-JJF4-6PM3 vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-Q298-375F-5Q63 vulnerabilities
Vulnerabilities for packages: trino, flyway...
GHSA-WHH8-FJGC-QP73 vulnerabilities
Vulnerabilities for packages: nemo...
GHSA-F686-HW9C-XW9C vulnerabilities
Vulnerabilities for packages: trino...
GHSA-FJ7X-Q9J7-G6Q6 vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2025-0508
A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...
CVE-2024-10363
In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions...
CVE-2024-9000
In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...
CVE-2024-8024
A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...
GHSA-M27W-WVC9-V4MQ vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-GRG4-WF29-R9VV vulnerabilities
Vulnerabilities for packages: druid...
GHSA-9VJP-V76F-G363 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-WX5J-54MM-RQQQ vulnerabilities
Vulnerabilities for packages: druid...
GHSA-WM47-8V5P-WJPJ vulnerabilities
Vulnerabilities for packages: druid...
GHSA-F256-J965-7F32 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2024-13768
The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the citsassignfontstab function. This makes it possible fo...