eNMS 路径遍历漏洞

eNMS is an open source network automation platform from eNMS. A path traversal vulnerability exists in eNMS version 4.2 and earlier. An attacker could exploit this vulnerability to access sensitive files or directories on the system...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which is caused by an SQL injection into the parameter viewid...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty salon management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which originates from a SQL injection in the parameter name...

Farmacia 安全漏洞

Farmacia is a content management system from code-projects open source. A security vulnerability exists in Farmacia version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter name...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A security vulnerability exists in Centreon that stems from a possible SQL injection when creating wo...

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect operation of the parameter sername that can result in a...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeql-extractor-iac-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3f77f847f2c7d09571ef2516734c1d483d434e0980f32c21967900b8d28dd4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

itsourcecode Tailoring Management System 注入漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in itsourcecode Tailoring Management System version 1.0, which originates from the presence of SQL injection...

PulseAudio 安全漏洞

PulseAudio is an open source audio system from PulseAudio for POSIX OS. The system is primarily used for audio transmission, among other things. A security vulnerability exists in PulseAudio. An attacker exploiting this vulnerability could cause the program to crash...

ZhongBangKeJi CRMEB 安全漏洞

ZhongBangKeJi CRMEB is an open source e-commerce management system from China ZhongBang Technology ZhongBangKeJi. A security vulnerability exists in ZhongBangKeJi CRMEB v5.4.0, which originates from an arbitrary file read vulnerability in the savebasics function. An attacker can exploit this...

7-Zip 安全漏洞

7-Zip is a compression software from the 7-Zip open source. A security vulnerability exists in 7-Zip that stems from a logic error when processing streams, which could lead to an infinite loop that creates a denial of service condition...

Malicious code in viewercontext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d130e5ac790b05038b23ecd7f937fd9b35a2ddc5696e069991b3f620e23c308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52307

authentik is an open-source identity provider. Due to the usage of a non-constant time comparison for the /-/metrics/ endpoint it was possible to brute-force the SECRETKEY, which is used to authenticate the endpoint. The /-/metrics/ endpoint returns Prometheus metrics and is not intended to be...

CVE-2024-52289 authentik has an insecure default configuration for OAuth2 Redirect URIs

authentik is an open-source identity provider. Redirect URIs in the OAuth2 provider in authentik are checked by RegEx comparison. When no Redirect URIs are configured in a provider, authentik will automatically use the first redirecturi value received as an allowed redirect URI, without escaping...

Unspecified vulnerability in Linux kernel (CNVD-2024-46390)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with flexspi compatibility strings. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46423)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of an overriderlimit logic recovery issue. No detailed vulnerability details are provided at th...

Unspecified vulnerability in Linux kernel (CNVD-2024-46417)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not locking XArray when fetching VM entries.No details of the vulnerability are available at this time...