1504 matches found
InternLM LMDeploy code injection vulnerability
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...
BIT-JOOMLA-2023-23752 [20230201] - Core - Improper access check in webservice endpoints
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints...
BIT-JOOMLA-2021-26033 [20210502] - Core - CSRF in AJAX reordering endpoint
An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint...
BIT-JOOMLA-2021-23127 [20210301] - Core - Insecure randomness within 2FA secret generation
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes...
BIT-JOOMLA-2020-35614 [20201105] - Core - User Enumeration in backend login
An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page...
BIT-JOOMLA-2020-24599
An issue was discovered in Joomla! before 3.9.21. Lack of escaping in modlatestactions allows XSS attacks...
BIT-JOOMLA-2020-15697
An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...
BELL-CVE-2025-21950
Bulletin has no description...
BELL-CVE-2025-21991
Bulletin has no description...
CVE-2024-47214
An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...
SNMP for Power Supply configured but alerts not receiving
SNMP configured for Power Supply but alerts not receiving...
Citrix Workspace App for MAC - Intermittent sign in failure, browser access works
Administrators may notice that the Mac end points intermittently fail sign into workspace app. Visiting the store via browser would work consistently...
GHSA-929M-PHJG-QWCC Duplicate Advisory: MathLive's Lack of Escaping of HTML allows for XSS
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qwj6-q94f-8425. This link is maintained to preserve external references. Original Description Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before fixed in 0.104.0 allows an attacker...
WordPress WordPress Galleria plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WordPress Galleria versions = 1.4...
WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Content Manager Light versions = 3.2...
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting XSS. This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0...
CGA-VR42-XF3W-MQH8
Bulletin has no description...
CGA-7H72-423X-QHQR
Bulletin has no description...
Licensed uberAgent still shows Evaluation Version splash screen at login
An operating system with uberAgent installed continues to show a splash screen during user login, stating the agent is running an Evaluation Version. The uberAgent.log file shows messages similar to the following: 2024-12-06 13:50:25.560 +0100,INFO ,WORKGROUP,SRV2016$,6372,LicenseCheck,Starting...