GHSA-P2H2-3VG9-4P87 vulnerabilities

Vulnerabilities for packages: gh...

GHSA-RP9H-RF7G-HWGR vulnerabilities

Vulnerabilities for packages: efs-utils...

BELL-CVE-2024-21853

Bulletin has no description...

RHSA-2024:8791 Red Hat Security Advisory: krb5 security update

Bulletin has no description...

Moodle IDOR when accessing list of badge recipients

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

BELL-CVE-2024-11168

Bulletin has no description...

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system public, private, etc. The module doesn't sufficiently protect against Cross Site Request Forgery under allowing an attacker to trick a site user into...

GHSA-6X36-QXMJ-RV4P vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-11117 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11115 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11114 vulnerabilities

Vulnerabilities for packages: chromium...

Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...

GHSA-G5VP-J278-8PJH Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...

GHSA-2586-F3P4-HQ84 LightGBM Remote Code Execution Vulnerability

LightGBM Remote Code Execution Vulnerability...

CVE-2024-49048

TorchGeo Remote Code Execution Vulnerability...

PYSEC-2024-204

TorchGeo Remote Code Execution Vulnerability...

MAL-2024-10607 Malicious code in bitcor-mnemonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b64aa1479d9e5fae10ef50a34b24b32b9bb09f98fd3bc301e6954ef6bffe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...