40 matches found
CVE-2024-55635 Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 7.0 before 7.102...
Session Fixation
Umbraco is vulnerable to Session Fixation. The vulnerability is due to a session timeout discrepancy where the Backoffice logout page displays a session timeout message before the server session expires, leading users to believe they are logged out about 30 seconds early. It allows an attacker to...
MAL-2025-6582 Malicious code in sensadway (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bd6ee914063e1d35067f3d6d13bc64aabf1bf7e7e1630f61047b55302f440e67 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in manyhttps (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4
pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...
PT-2022-37670 · Belden · Hirschmann
Уязвимость программного обеспечения управления сетью Hirschmann Industrial HiVision связана с возможностью обхода пути. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
GHSA-HWRC-W5GG-F335 TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential...
Is HEAT Classic (HEAT Serivce and Support) vulnerable to CVE-2021-44228 Java logging library (log4j)
Created Date Dec 14, 2021 3:12:00 PM...
CVE-2018-7439
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...
CVE-2015-8857
The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript...
DTSA-145-1 pcre3 - heap-based buffer overflow
Bulletin has no description...
wvtftpd buffer overflow
strcpy buffer overflow...
linux kernel ip_setsockopt integer overflow
Integer overflow on MCASTMSFILTER option processing...
