7597 matches found
@conform-to/react (>=1.0.0-pre.0, <=1.1.0), @conform-to/zod (>=1.0.0-pre.3, <=1.1.0) potentially affected by CVE-2024-32866 via @conform-to/dom (>=1.0.0, <=1.1.0-pre.0)
@conform-to/dom NPM version =1.0.0, =1.0.0-pre.0, =1.0.0-pre.3, =1.1.0 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...
Hugo 安全漏洞
Gohugoio Hugo is a framework from the Gohugoio community based on the Go language for rapid generation of static sites. A security vulnerability exists in Hugo versions prior to v0.123.0, which stems from Markdown headers not being escaped in internal rendering hooks...
CVE-2024-30922
SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...
CVE-2024-30922
SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...
CVE-2024-30923
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...
CVE-2024-30923
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...
CVE-2024-30922
SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...
CVE-2024-30923
DerbyNet v9.0 and earlier versions are affected by an SQL Injection in the print/render/racer.inc path that allows remote code execution via the where clause in Racer Document Rendering. Root cause is insufficient sanitization of the where parameter, enabling attackers to manipulate SQL queries. ...
CVE-2024-30923
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...
CVE-2024-30922
DerbyNet v9.0 is affected by CVE-2024-30922: a SQL Injection in print/render/award.inc allows a remote attacker to execute arbitrary code via the where clause in Award Document Rendering. Exploitation is reported as unauthenticated/remote in multiple sources. Affected component: DerbyNet 9.0, mod...
DerbyNet 安全漏洞
DerbyNet is a simple code for a match broadcasting program. A security vulnerability exists in DerbyNet version v9.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the where clause in the Racer document rendering...
CVE-2024-30922
SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...
CVE-2024-30923
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...
SUSE CVE-2021-47200
In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drmgemttmmmap drmgemttmmmap drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drmgemprimemmap, that drop will free the gem object, and the...
CVE-2024-30402
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. When telemetry requests are sent to the device, and t...
CVE-2024-30402
Summary of CVE-2024-30402 (Juniper Junos OS / Junos OS Evolved): The vulnerability stems from an improper check for unusual or exceptional conditions in the Layer 2 Address Learning Daemon (l2ald). When telemetry requests are received and the Dynamic Rendering Daemon (drend) is suspended, l2ald c...
UBUNTU-CVE-2021-47200
In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drmgemttmmmap drmgemttmmmap drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drmgemprimemmap, that drop will free the gem object, and the...
DerbyNet 跨站脚本漏洞
DerbyNet is a simple code for match broadcasting projects. A cross-site scripting vulnerability exists in DerbyNet version 9.0 that stems from a failure to properly clean up user input in the document rendering path, which allows injection of malicious script...