20180 matches found
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that stems from a SQL injection vulnerability in the Starshop component...
SchedMD Slurm Security Vulnerability
SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD, Inc. A security vulnerability exists in SchedMD Slurm that stems from the presence of incorrect access control...
CVE-2023-50248
CKAN vulnerability CVE-2023-50248 affects versions 2.0.0 up to prior to 2.9.10 and 2.10.3. When a user with dataset-create/edit permissions submits a POST to /dataset/new with a specially crafted field (auth cookie or Authorization header), the hosting server can trigger an out-of-memory error. T...
[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38
LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...
Fedora: Security Advisory for libreoffice (FEDORA-2023-0d971cd6aa)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RockOA Security Breach
RockOA Xinhuo is an open source office OA system. RockOA 2.3.3 before the version of a security vulnerability , the vulnerability stems from the vulnerability to SQL injection attacks...
Silverpeas Security Vulnerabilities
Silverpeas is an open source business collaboration platform. The platform includes applications for project management, blogs, forums and document management. A security vulnerability exists in Silverpeas Core 6.3.1 and earlier versions, which stems from the vulnerability of the application to...
PT-2023-8104 · Otcms · Otcms
Name of the Vulnerable Software and Affected Versions: OTCMS version 7.01 Description: A critical issue was found in OTCMS, related to the lack of protection for the SQL query structure. This allows a remote attacker to gain unauthorized access to protected information. The issue is associated wi...
Security Bulletin: IBM Automation Decision Services November 2023 - Multiple CVEs addressed
Summary IBM Automation Decision Services is vulnerable to denial of service attacks in third party and open source used in the product for various functions. See full list below. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2023-46233 DESCRIPTION: Brix crypto-js could...
Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data
Summary IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to several open source vulnerabilites. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2022-1996 DESCRIPTION: go-restful could allow a remote attacker to...
eSpeak NG Security Vulnerability
eSpeak NG is an open source software text-to-speech synthesizer from eSpeak NG Open Source. A security vulnerability exists in eSpeak NG version 1.52-dev, which stems from a floating point exception in the PeaksToHarmspect method of the wavegen.c file...
eSpeak NG Security Vulnerability
eSpeak NG is an open source software text-to-speech synthesizer from eSpeak NG Open Source. A security vulnerability exists in eSpeak NG version 1.52-dev, which is caused by a buffer underflow in the CountVowelPosition method of the synthdata.c file...
Umbraco Security Breach
Umbraco is an open source content management system CMS written in C from Umbraco, Denmark. Umbraco suffers from a security vulnerability that stems from a low-privileged user editor, etc. being able to access some unintended endpoints...
VulnCheck KEV: CVE-2017-1000028
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request...
CVE-2023-48715
CVE-2023-48715 affects Tuleap Community Edition and Tuleap Enterprise Edition. The root cause is that release names were not properly escaped on the edition page, enabling a malicious user who can create an FRS release to cause a user with write permissions to execute uncontrolled code. Affected ...
Malicious code in bynderweb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c0e459e61d88421f9f8e8abec619108bcd6e0bb8b0e6f556a442ed551cb0fa1 The OpenSSF Package Analysis project identified 'bynderweb' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
Exploit for Deserialization of Untrusted Data in Apache Activemq
CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps...
VDD
VDD Vulnerability Database and Documentation This reposito...
Malicious code in orchestrationdesk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c4b49b3a4dec106baa72132f15b7493b62457fa4f2bc0c4bf2ddfe83e58ea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...