231583 matches found
Remote code execution
JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution or...
CVE-2024-1142
CVE-2024-1142 describes a path traversal vulnerability in Sonatype IQ Server affecting versions 143–170. An authenticated remote attacker can overwrite or delete files via a crafted request. The issue is fixed in version 171. Remediation: upgrade to 171 (or apply vendor guidance). Other connected...
CVE-2024-27915
CVE-2024-27915 (Sulu) affects Sulu CMS (PHP). Versions 2.2.0 through before 2.4.17 and 2.5.13 allow access to pages regardless of role permissions for webspaces with security and permission checks enabled; webspaces without security are not affected. The issue is patched in 2.4.17 and 2.5.13. Mit...
CVE-2024-27307
CVE-2024-27307 (JSONata) is a prototype-pollution vulnerability in JSONata.js. Starting with 1.4.0 and affecting versions prior to 1.8.7 and 2.0.4, a malicious JSONata expression can abuse the transform operator to override properties on Object and Object.prototype, enabling denial of service, re...
Design/Logic Flaw
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Sql injection
pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for a numeric value must be immediately preceded by a minus; there must be a second placeholder for ...
CVE-2024-27304
CVE-2024-27304 affects pgx, a PostgreSQL driver/toolkit for Go. The vulnerability enables SQL injection when an attacker can cause a single query or Bind message to exceed 4 GB due to an integer overflow in message size calculation, which can cause the large message to be split into multiple mess...
CVE-2024-27289
CVE-2024-27289 affects the Go pgx PostgreSQL driver. Before 4.18.2, a SQL injection can occur when using the non-default simple protocol with a minus immediately before a numeric placeholder and a second placeholder for a string on the same line, with both values user-controlled. The issue is fix...
CVE-2024-27287
ESPHome’s CVE-2024-27287 affects the dashboard’s edit API in ESPHome 2023.12.9 up to 2024.2.1 (prior to 2024.2.2). A remote, authenticated user can inject arbitrary JavaScript via the /edit endpoint by posting to /edit?configuration=[file], storing unsanitized data in a page served with Content-T...
Cross site scripting
Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content...
CVE-2024-24766
CVE-2024-24766 concerns username enumeration in the CasaOS-UserService login page. Affected software is CasaOS-UserService (the login module) with versions prior to 0.4.7 (specifically 0.4.4.3 through 0.4.7) where the login responses disclosed whether a username exists via distinct error messages...
CVE-2024-24767
CVE-2024-24767 concerns CasaOS-UserService where versions before 0.4.7 fail to defend against password brute‑force attacks, allowing attacker with network access to achieve superuser‑level access to the server. The issue is due to inadequate protection over login attempts in CasaOS web app. A pat...
CVE-2024-24761
CVE-2024-24761 affects Galette (membership management app). Public pages were by default restricted to admins/staff in versions 1.0.0–1.0.1; configuration allowed restricting to up-to-date members or everyone. Version 1.0.2 fixes this access-control issue. Connected sources confirm the affected r...
CVE-2023-50716
CVE-2023-50716 affects eProsima Fast DDS (formerly Fast RTPS). Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG Submessage can trigger a bad-free memory release within the Inline_qos/SerializedPayload path of the affected object, allowing the Fast-DDS process to b...
CVE-2023-50167
CVE-2023-50167 affects Pega Platform versions 7.1.7 through 23.1.1 with an XSS vulnerability in editing/rendering user HTML content. The Red Hat and NVD entries corroborate the same issue; Red Hat cites the affected range and description, while other sources reiterate the impact. The underlying r...
Default credentials
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default...
Cross site scripting
Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...
Cross site scripting
Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...
Command injection
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid...