13090 matches found
CGA-8XJM-6QW4-RQ5C
Bulletin has no description...
SUSE-SU-2024:4287-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068...
SQL Injection
tech.powerjob, powerjob is vulnerable to SQL injection. The vulnerability is due to improper handling of the version parameter, which allows attackers to manipulate SQL queries...
PT-2025-13868
Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sonoma versions prior to 14.7.5 Description The issue was addressed with improved handling of protocols. An attacker in a privileged network position can track a user's activity. Recommendations For...
CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
GHSA-VM32-9RQF-RH3R vulnerabilities
Vulnerabilities for packages: pnpm...
MAL-2024-11775 Malicious code in plugin-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94f214fcdbb802ff7c5fc8a5ed3a9b6beadad35c781b93af7a7f4465020fe333 The OpenSSF Package Analysis project identified 'plugin-e2e-tests' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Schneider Electric Modicon
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
DSA-5826-1 smarty3 - security update
Bulletin has no description...
CVE-2024-55635 Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 7.0 before 7.102...
BELL-CVE-2024-47615
Bulletin has no description...
BELL-CVE-2024-47600
Bulletin has no description...
BELL-CVE-2024-47541
Bulletin has no description...
CGA-5J94-HQ8C-4597
Bulletin has no description...
MAL-2024-11509 Malicious code in Modernial.UI.WinForm (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11507 Malicious code in DiscordNetApi (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11725 Malicious code in testlibrary128982 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11583 Malicious code in eosio-signerz (PyPI)
--- -= Per source details. Do not edit below this line.=-...