编号撤回

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. This CVE number has been withdrawn...

Faucet SDN Ryu 安全漏洞

Faucet SDN Ryu is a component-based software-defined networking framework from Faucet Open Source. A security vulnerability exists in Faucet SDN Ryu version 4.34, which stems from a vulnerability that allows an attacker to cause a denial of service by manipulating OFPQueueProp.len=0...

OpenAgents 安全漏洞

OpenAgents is an open language agent platform from xlang-ai open source. A security vulnerability exists in OpenAgents fe73ac4 and earlier versions, which stems from a vulnerability that allows an attacker to bypass the allowedfile protection mechanism by using an incorrect file extension...

[SECURITY] Fedora 39 Update: chromium-124.0.6367.118-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

MuseScore 缓冲区错误漏洞

MuseScore is an open source free sheet music software from MuseScore Open Source. A security vulnerability exists in MuseScore that stems from a buffer overflow vulnerability in the analysis of CAP files...

Xreader 安全漏洞

Xreader is an open source document viewer for Linux Mint. A security vulnerability exists in Xreader that stems from a remote code execution vulnerability in the analysis of CBT files...

Xreader 安全漏洞

Xreader is an open source document viewer for Linux Mint. A security vulnerability exists in Xreader that stems from a remote code execution vulnerability in the analysis of EPUB files...

Centreon 安全漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for network, system and application resources. A security vulnerability exists in Centreon that stems from the presence of a cross-site...

CVE-2024-34061

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. In affected versions Input in parameter notificationurls is not processed resulting in javascript execution in the application. A reflected XSS vulnerability happens when...

CVE-2024-34061

CVE-2024-34061 – Changedetection.io is affected in versions prior to 0.45.22. A reflected Cross‑Site Scripting (XSS) vulnerability arises because input in the notification_urls parameter is not properly sanitized and is reflected on the page, enabling injection of malicious JavaScript. The CVSS v...

CVE-2024-32890

librespeed/speedtest is an open source, self-hosted speed test for HTML5. In affected versions missing neutralization of the ISP information in a speedtest result leads to stored Cross-site scripting in the JSON API. The processedString field in the ispinfo parameter is missing neutralization. It...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a double release vulnerability in the function tcpmportunregisterpd...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of an out-of-bounds issue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the presence of a post-release reuse vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a memory leak vulnerability in...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

编号撤回

Tinyproxy is a small, efficient HTTP/SSL proxy daemon from Tinyproxy Open Source. This CVE number has been withdrawn...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.5

Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.5 Vulnerability Details CVEID:CVE-2022-1471 DESCRIPTION: SnakeYaml could allow a remote authenticated attacker to execute arbitra...