11989 matches found
CGA-82P3-GW4M-V7WV
Bulletin has no description...
CGA-6MFH-W65F-3M9C
Bulletin has no description...
CGA-4H2V-R9CF-2RH2
Bulletin has no description...
CGA-47V2-6JXH-6CXF
Bulletin has no description...
CVE-2024-4821
Technical details beyond this entry are not provided in the supplied documents; monitor for updates from vendors/advisories.
CVE-2022-28657
CVE-2022-28657 concerns Apport, where the Python crash handler is not disabled before chroot, enabling a local attacker to exploit the issue. The vulnerability is described across multiple advisories (e.g., Ubuntu USN-6894-1) and related Nessus/OSV entries, all referencing the same root cause: Ap...
CVE-2024-5635
CVE-2024-5635 affects the itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in an unknown function of the file index.php , where manipulating the argument txtsearch leads to SQL injection . The attack is executable remotely and the exploit has been disclosed publicly. Connected...
CVE-2024-23326
CVE-2024-23326 is a vulnerability in Envoy (an open source cloud-native edge and service proxy) where a server can be tricked into adding an upgrade header in a response, causing request smuggling. The root cause is Envoy accepting a 200 response in a protocol upgrade flow (RFC 7230 §6.7 discusse...
CVE-2024-37273
CVE-2024-37273 affects the Jan project, specifically version 0.4.12 . The vulnerability lies in the /v1/app/appendFileSync interface, where uploading a crafted file can lead to arbitrary code execution on the server. The available connected document details confirm this arbitrary-file-upload flaw...
GHSA-V6MG-7F7P-QMQP apko Exposure of HTTP basic auth credentials in log output
Summary Exposure of HTTP basic auth credentials from repository and keyring URLs in log output Details There was a handful of instances where the apko tool was outputting error messages and log entries where HTTP basic authentication credentials were exposed for one of two reasons: 1. The%s verb...
CVE-2024-28999
CVE-2024-28999 is a race-condition vulnerability in SolarWinds Platform web console. Public materials (exploit-db, GitHub exploit, Nessus plugin) confirm a login-page race condition affecting SolarWinds Platform 2024.1 SR1 and earlier; several related advisories (Red Hat, ENISA ENISA EUVD, NCSC) ...
CVE-2024-37061
MLflow CVE-2024-37061 affects MLflow platforms running version 1.11.0 or newer. A maliciously crafted MLproject can trigger remote code execution on an end user’s system when run. Multiple connected sources corroborate RCE related to MLflow projects input handling, including descriptions and advi...
CVE-2024-4581
CVE-2024-4581 affects the Slider Revolution WordPress plugin (versions up to and including 6.7.11). The vulnerability is a Stored XSS in the Add Layer widget caused by insufficient input sanitization and output escaping for user-supplied class, id, and title attributes. Exploitation requires an A...
CVE-2023-39161
CVE-2023-39161 is a WordPress WP Discussion Board plugin vulnerability affecting versions up to 2.4.8, described as a Content Injection (XSS-related) issue in WordPress Discussion Board. The connected Patchstack entry confirms the fix in version 2.4.9. Base CVSSv3.1 score is 5.4 (Medium); impact ...
CVE-2024-0757
CVE-2024-0757 : The WordPress plugin “Insert or Embed Articulate Content into WordPress” (
CVE-2024-4750
The CVE-2024-4750 entry concerns the BuddyBoss Platform WordPress plugin prior to 2.6.0, where an Insecure Direct Object Reference (IDOR) allows a user to like a private post by manipulating the post ID in the request (id parameter). Multiple sources (Patchstack, PT-Security, WPVulndb, CVE record...
CVE-2024-4462
CVE-2024-4462 concerns the Nafeza Prayer Time WordPress plugin. The description indicates a Stored Cross‑Site Scripting vulnerability in admin settings for all versions up to 1.2.9, caused by insufficient input sanitization and output escaping. The issue affects multisite installations and sites ...
CVE-2024-4870
CVE-2024-4870 affects the WordPress plugin Frontend Registration – Contact Form 7. The vulnerability arises from insufficient restriction on the cf7frr post meta, in versions up to and including 5.1, enabling authenticated attackers with editor-level access and higher to modify the default user r...