PT-2024-21369 · Enpass · Enpass Password Manager Desktop Client

Name of the Vulnerable Software and Affected Versions: Enpass Password Manager Desktop Client version 6.9.2 Description: The issue allows attackers to run arbitrary HTML code via the creation of a crafted note, potentially leading to HTML injection. This can occur in the Enpass Password Manager...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

Cross Site Scripting (XSS)

francoisjacquet/rosariosis is vulnerable to Cross Site Scripting. The vulnerability is due to improper handling of input in the component Add Portal Note, leading to the execution of arbitrary JavaScript code...

CVE-2024-3138 francoisjacquet RosarioSIS Add Portal Note cross site scripting

DISPUTED A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unknown processing of the component Add Portal Note. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

RosarioSIS 跨站脚本漏洞

RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make sound decisions. A cross-site scripting vulnerability exists in RosarioSIS version 11.5.1, which stems from the inclusion of some unknown processing in the component Add Portal...

PT-2024-24026 · Francoisjacquet · Rosariosis

Name of the Vulnerable Software and Affected Versions: francoisjacquet RosarioSIS version 11.5.1 Description: A disputed issue affects the Add Portal Note component, leading to cross-site scripting. The attack can be initiated remotely. The vendor notes that the PDF is opened by the browser app i...

DEBIAN-CVE-2021-47172

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers Channel numbering must start at 0 and then not have any holes, or it is possible to overflow the available storage. Note this bug was introduced as pa...

DEBIAN-CVE-2024-28570

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the processMakerNote function when reading images in JPEG format...

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

PT-2024-22473 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 r1909 Description: The issue allows a local attacker to cause a denial of service DoS via the processMakerNote function when reading images in JPEG format. Recommendations: For FreeImage version 3.19.0 r1909, consider...

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

CVE-2024-28149

creationtimestamp| type| source ---|---|--- 2024-03-06 18:26:46+00:00| seen| https://t.me/ctinow/201620 2024-03-06 19:56:35+00:00| seen| https://t.me/ctinow/201723...

BIT-GITLAB-2020-10956

GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature...

PT-2024-40960 · Gtk-Rs · Gtk-Rs

Name of the Vulnerable Software and Affected Versions: gtk-rs affected versions not specified Description: The gtk-rs GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that the crates are no longer...

CVE-2024-27139

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do...

PT-2024-21636 · Undefined · Undefined

CVE-2024-27084 Rejected reason: This CVE is a duplicate of CVE-2024-1631. https://t.co/234axZtati...

Deserialization of untrusted data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

CVE-2024-1748

CVE-2024-1748 affects van_der_Schaar LAB AutoPrognosis 0.1.21, specifically the Release Note Handler's function load_model_from_file , where input deserialization leads to a vulnerability. Descriptions across sources indicate remote initiation with high impact on confidentiality, integrity, and a...

CVE-2024-1748 van_der_Schaar LAB AutoPrognosis Release Note load_model_from_file deserialization

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

PT-2024-18273 · Van Der Schaar · Van Der Schaar Lab Autoprognosis

Name of the Vulnerable Software and Affected Versions: van der Schaar LAB AutoPrognosis version 0.1.21 Description: A critical vulnerability was found in the function load model from file of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated...