11989 matches found
CGA-P8JX-H4XW-G924
Bulletin has no description...
CGA-G7MW-P7WJ-F8GC
Bulletin has no description...
CGA-FQV6-M5XF-9WF3
Bulletin has no description...
CGA-F8W3-V8CW-RC4Q
Bulletin has no description...
CGA-C883-3X62-Q4FW
Bulletin has no description...
CGA-9RCV-XFX7-QPQ7
Bulletin has no description...
CGA-8V4C-HCPH-62XH
Bulletin has no description...
CGA-54PM-RXX7-5PH2
Bulletin has no description...
CGA-82P3-GW4M-V7WV
Bulletin has no description...
CGA-6MFH-W65F-3M9C
Bulletin has no description...
CGA-4H2V-R9CF-2RH2
Bulletin has no description...
CGA-47V2-6JXH-6CXF
Bulletin has no description...
CVE-2024-4821
Technical details beyond this entry are not provided in the supplied documents; monitor for updates from vendors/advisories.
CVE-2022-28657
CVE-2022-28657 concerns Apport, where the Python crash handler is not disabled before chroot, enabling a local attacker to exploit the issue. The vulnerability is described across multiple advisories (e.g., Ubuntu USN-6894-1) and related Nessus/OSV entries, all referencing the same root cause: Ap...
CVE-2024-5635
CVE-2024-5635 affects the itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in an unknown function of the file index.php , where manipulating the argument txtsearch leads to SQL injection . The attack is executable remotely and the exploit has been disclosed publicly. Connected...
CVE-2024-23326
CVE-2024-23326 is a vulnerability in Envoy (an open source cloud-native edge and service proxy) where a server can be tricked into adding an upgrade header in a response, causing request smuggling. The root cause is Envoy accepting a 200 response in a protocol upgrade flow (RFC 7230 §6.7 discusse...
CVE-2024-37273
CVE-2024-37273 affects the Jan project, specifically version 0.4.12 . The vulnerability lies in the /v1/app/appendFileSync interface, where uploading a crafted file can lead to arbitrary code execution on the server. The available connected document details confirm this arbitrary-file-upload flaw...
GHSA-V6MG-7F7P-QMQP apko Exposure of HTTP basic auth credentials in log output
Summary Exposure of HTTP basic auth credentials from repository and keyring URLs in log output Details There was a handful of instances where the apko tool was outputting error messages and log entries where HTTP basic authentication credentials were exposed for one of two reasons: 1. The%s verb...
CVE-2024-28999
CVE-2024-28999 is a race-condition vulnerability in SolarWinds Platform web console. Public materials (exploit-db, GitHub exploit, Nessus plugin) confirm a login-page race condition affecting SolarWinds Platform 2024.1 SR1 and earlier; several related advisories (Red Hat, ENISA ENISA EUVD, NCSC) ...