CVE-2024-31080 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2024-21885 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2024-21886 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2024-0229 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2023-6816 vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2023-6478 affecting package xorg-x11-server for versions less than 1.20.10-5

CVE-2023-6478 affecting package xorg-x11-server for versions less than 1.20.10-5. A patched version of the package is available...

CVE-2023-1393 affecting package xorg-x11-server for versions less than 1.20.10-4

CVE-2023-1393 affecting package xorg-x11-server for versions less than 1.20.10-4. A patched version of the package is available...

GHSA-R726-VMFQ-J9J3 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x through 2.9.9. With default typing enabled, an attacker can send a specifically crafted JSON message to the server that allows them to read arbitrary local files...

Updated resteasy package fix CVE-2014-3490

Updated resteasy packages fixes security vulnerability: It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEa...

CVE-2013-4313

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string...

Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alcatel-Luce...

libxine -- buffer overflow vulnerability

A Secunia Advisory reports: Federico L. Bossi Bonin has discovered a weakness in xine-lib, which can be exploited by malicious people to crash certain applications on a user's system. The weakness is cause due to a heap corruption within the "xinepluginphttp.so" plugin when handling an overly lar...