19534 matches found
Sylius 安全漏洞
Sylius is a suite of open source e-commerce platforms based on the Symfony framework by the Polish company Sylius. A security vulnerability exists in Sylius. An attacker exploiting the vulnerability could execute malicious scripts in a user's browser...
Nextcloud 安全漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud that originates from a malicious user being able to send an incorrectly formatted login link that redirects th...
Nextcloud 安全漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud that stems from Nextcloud Tables allowing users to create tables with separate columns...
Google Android elevation of privilege vulnerability (CNVD-2024-49502)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...
Google Android Information Disclosure Vulnerability (CNVD-2024-47704)
Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
FlightPath 安全漏洞
FlightPath is an open source academic advising system for universities from FlightPath, Inc. A security vulnerability exists in FlightPath version 7.5. An attacker can exploit this vulnerability to inject arbitrary JavaScript into a user's web browser...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. LibreNMS suffers from a cross-site scripting vulnerability that stems from a stored...
Budget Control Gateway 授权问题漏洞
Budget Control Gateway is a gateway component of the Budget Control application from BudgetControl open source. An authorization issue vulnerability exists in Budget Control Gateway versions prior to 1.2 that stems from failure to properly validate authentication tokens, allowing an attacker to...
Google Android Code Injection Vulnerability (CNVD-2026-11745)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code injection vulnerability that stems from a lack of privilege checking. The vulnerability can be exploited by an attacker to elevate privileges...
Google Android Denial of Service Vulnerability (CNVD-2024-47703)
Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by attackers to cause a denial of service...
CVE-2024-40579
Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...
Malicious code in wixdevpoc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233144e1f7875e1d1028b6101f34a5191e04312b9190d4be6ebcd51fee02c497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2024-9476
A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizatio...
CVE-2024-40579
Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter...
Lunary 信息泄露漏洞
lunary is lunary open source a production toolkit for LLM . lunary has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2024-40579
CVE-2024-40579 is a cross-site scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v1.7.1 . The issue is triggered via modification of the hostname parameter , enabling a remote attacker to obtain sensitive information. The CVSS v3.1 metrics indicate a base score 5.4 (MEDIUM)...
UBUNTU-CVE-2024-9476
A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizatio...
CVE-2024-52305 UnoPim Stored XSS : Cookie hijacking through Create User function
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an...
