12218 matches found
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the loading of a specially crafted file. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-arm to version 8.0.12, 9.0.1 or higher. References - GitHub Issue...
BIT-PHP-MIN-2023-3823 Security issue with external entity loading in XML without enabling it
In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...
CVE-2024-49375 Remote Code Execution via Remote Model Loading in Rasa
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on t...
CVE-2024-49375 Remote Code Execution via Remote Model Loading in Rasa
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on t...
GHSA-CPV4-GGRR-7J9V Rasa Allows Remote Code Execution via Remote Model Loading
Vulnerability A vulnerability has been identified in Rasa Pro and Rasa Open Source that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: - The HTTP API must be enabled on the...
Rasa Allows Remote Code Execution via Remote Model Loading
Vulnerability A vulnerability has been identified in Rasa Pro and Rasa Open Source that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: - The HTTP API must be enabled on the...
HCL DRYiCE MyXalytics 安全漏洞
HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from susceptibility to an out-of-band resource loading HTTP vulnerability...
CVE-2024-13186
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13185
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13186 MinigameCenter information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13186
The Vivo MinigameCenter module, a command line interface for rapid development of Vivo mini-games, is vulnerable to information leakage due to insufficient restrictions on loading URLs . This vulnerability affects versions prior to 2.2.4.0 . The flaw could lead to partial information disclosure ....
CVE-2024-13185
The MinigameCenter module, a development interface for Vivo mini-games, contains a vulnerability where insufficient restrictions on loading URLs may lead to partial information disclosure . This issue specifically affects Vivo MinigameCenter versions prior to 2.3.5.0 . While the root cause is ide...
CVE-2024-13173
The Vivo Health application (an exercise instruction and health management software) is vulnerable to information leakage due to insufficient restrictions on loading URLs . This security flaw affects versions prior to 4.1.6.33 . The vulnerability allows for partial information disclosure because ...
CVE-2024-13173 Health information leakage vulnerability
The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-56455
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56454
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56455
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56456
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...