12021 matches found
CGA-C883-3X62-Q4FW
Bulletin has no description...
CGA-9RCV-XFX7-QPQ7
Bulletin has no description...
CGA-8V4C-HCPH-62XH
Bulletin has no description...
CGA-54PM-RXX7-5PH2
Bulletin has no description...
CGA-82P3-GW4M-V7WV
Bulletin has no description...
CGA-6MFH-W65F-3M9C
Bulletin has no description...
CGA-4H2V-R9CF-2RH2
Bulletin has no description...
CGA-47V2-6JXH-6CXF
Bulletin has no description...
CVE-2024-4821
Technical details beyond this entry are not provided in the supplied documents; monitor for updates from vendors/advisories.
CVE-2022-28657
CVE-2022-28657 concerns Apport, where the Python crash handler is not disabled before chroot, enabling a local attacker to exploit the issue. The vulnerability is described across multiple advisories (e.g., Ubuntu USN-6894-1) and related Nessus/OSV entries, all referencing the same root cause: Ap...
CVE-2024-5635
CVE-2024-5635 affects the itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in an unknown function of the file index.php , where manipulating the argument txtsearch leads to SQL injection . The attack is executable remotely and the exploit has been disclosed publicly. Connected...
CVE-2024-23326
CVE-2024-23326 is a vulnerability in Envoy (an open source cloud-native edge and service proxy) where a server can be tricked into adding an upgrade header in a response, causing request smuggling. The root cause is Envoy accepting a 200 response in a protocol upgrade flow (RFC 7230 §6.7 discusse...
CVE-2024-37273
CVE-2024-37273 affects the Jan project, specifically version 0.4.12 . The vulnerability lies in the /v1/app/appendFileSync interface, where uploading a crafted file can lead to arbitrary code execution on the server. The available connected document details confirm this arbitrary-file-upload flaw...
GHSA-V6MG-7F7P-QMQP apko Exposure of HTTP basic auth credentials in log output
Summary Exposure of HTTP basic auth credentials from repository and keyring URLs in log output Details There was a handful of instances where the apko tool was outputting error messages and log entries where HTTP basic authentication credentials were exposed for one of two reasons: 1. The%s verb...
CVE-2024-28999
CVE-2024-28999 is a race-condition vulnerability in SolarWinds Platform web console. Public materials (exploit-db, GitHub exploit, Nessus plugin) confirm a login-page race condition affecting SolarWinds Platform 2024.1 SR1 and earlier; several related advisories (Red Hat, ENISA ENISA EUVD, NCSC) ...
CVE-2024-37061
MLflow CVE-2024-37061 affects MLflow platforms running version 1.11.0 or newer. A maliciously crafted MLproject can trigger remote code execution on an end user’s system when run. Multiple connected sources corroborate RCE related to MLflow projects input handling, including descriptions and advi...
CVE-2024-4581
CVE-2024-4581 affects the Slider Revolution WordPress plugin (versions up to and including 6.7.11). The vulnerability is a Stored XSS in the Add Layer widget caused by insufficient input sanitization and output escaping for user-supplied class, id, and title attributes. Exploitation requires an A...
CVE-2023-39161
CVE-2023-39161 is a WordPress WP Discussion Board plugin vulnerability affecting versions up to 2.4.8, described as a Content Injection (XSS-related) issue in WordPress Discussion Board. The connected Patchstack entry confirms the fix in version 2.4.9. Base CVSSv3.1 score is 5.4 (Medium); impact ...
CVE-2024-4750
The buddyboss-platform WordPress plugin versions prior to 2.6.0 is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. This flaw allows an attacker to like a private post by manipulating the id parameter within the request, specifically through the /wp-admin/admin-ajax.php end...