0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +174 more potentially affected by CVE-2024-21529 via dset (>=3.1.0, <=3.1.3)

dset NPM version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.1.10, =0.1.11 - @didomi/react 1.8.3 and more Source cves: CVE-2024-21529 Source...

Relyum RELY-PCIe 安全漏洞

Relyum RELY-PCIe is a smart pluggable board from Relyum Spain. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from a code injection vulnerability in the getParams function in phpinf.php...

Relyum RELY-PCIe 安全漏洞

The Relyum RELY-PCIe is an intelligent pluggable board from the Spanish company Relyum. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from the sysconf function containing a command injection vulnerability...

PT-2024-10743 · WordPress · Video Carousel Slider With Lightbox Plugin

Name of the Vulnerable Software and Affected Versions: video carousel slider with lightbox plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue is related to SQL Injection via the id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a bitmap corruption issue in the closerange component. No details of the vulnerability are provided at this...

PT-2024-9818 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 7.0.0 through 7.0.12 Fortinet FortiClientEMS versions 7.2.0 through 7.2.4 Description: The issue is related to an improper neutralization of special elements used in a command, also known as a 'Command...

Pluto 注入漏洞

Pluto is a unique language for Lua open-sourced by PlutoLang. It is used for general-purpose programming. An injection vulnerability exists in Pluto versions 0.9.0 through 0.9.4, which stems from the fact that scripts passing user-controlled values to the http.request header value can be affected...

PT-2024-9822 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 1.2.1 through 1.2.5 Fortinet FortiClientEMS versions 6.0.0 through 6.0.8 Fortinet FortiClientEMS versions 6.2.0 through 6.2.9 Fortinet FortiClientEMS versions 6.4.0 through 6.4.9 Fortinet FortiClientEMS versio...

PT-2024-13438 · Undefined · Undefined

SageCRM Directory Traversal, SQL Injection and Server-Side Request Forgery CVEs: CVE-2023-47300, CVE-2023-47301, CVE-2023-47302,CVE-2023-47303 https://t.co/HSou9Momct...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Windows 10 Version 1809...

SUSE SLES15: java-1_8_0-ibm / java-1_8_0-ibm-32bit / java-1_8_0-ibm-alsa / etc (SUSE-SU-2024:3162-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3162-1 advisory. - Update to Java 8.0 Service Refresh 8 Fix Pack 30 bsc1228346 - CVE-2024-21147: Fixed an array index overflow in...

SUSE-SU-2024:3162-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 30 bsc1228346 - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. bsc1228052 - CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. bsc1228051 -...

ABB Freelance AC 900F and AC 700F Numeric Range Comparison Without Minimum Check (CVE-2023-0425)

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

SUSE CVE-2024-44972

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE SLES15: java-1_8_0-openj9 / java-1_8_0-openj9-accessibility / etc (SUSE-SU-2024:3140-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3140-1 advisory. - Update to OpenJDK 8u422 build 05 with OpenJ9 0.46.0 virtual machine - CVE-2024-21147: Fixed an array index overflow in...

DEBIAN-CVE-2024-44972

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extentwritelockedrange BUG For subpage + zoned case, the following workload can lead to rsv data leak at unmount time: mkfs.btrfs -f -s 4k $dev mount $dev $mnt fsstress -w -n 8 -d $mnt -s...

SUSE-SU-2024:3140-1 Security update for java-1_8_0-openj9

This update for java-180-openj9 fixes the following issues: - Update to OpenJDK 8u422 build 05 with OpenJ9 0.46.0 virtual machine - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. bsc1228052 - CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. bsc1228051 -...

PT-2024-38993 · Abcd2 · Abcd2

Name of the Vulnerable Software and Affected Versions: ABCD ABCD2 versions up to 2.2.0-beta-1 Description: A problematic issue has been found in the software, affecting the processing of the file /buscar integrada.php. The manipulation of the Sub Expresion argument leads to cross-site scripting...

PT-2024-38985 · Eclipse · Eclipse Vert.X

Name of the Vulnerable Software and Affected Versions: Eclipse Vert.x versions 4.3.0 through 4.5.9 Description: The gRPC server in Eclipse Vert.x does not limit the maximum length of message payload, which can lead to potential issues. This issue does not affect the Vert.x gRPC server based on...

PT-2024-31458 · Za Internet · Za-Internet C-Mor Video Surveillance

Name of the Vulnerable Software and Affected Versions: za-internet C-MOR Video Surveillance versions 5.2401 through 6.00PL01 Description: An issue was discovered due to improper validation of user-supplied data, making different functionalities of the C-MOR web interface vulnerable to SQL injecti...