13092 matches found
BELL-CVE-2024-42241
Bulletin has no description...
UBUNTU-CVE-2024-4207
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under...
MAL-2024-7947 Malicious code in desttestdsfasdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beda944b2a885d613ea8fa4b42524e5dbd2868cdf4d1d519229b56bfdbe9d911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-43044 vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2024-7532 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-43113 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2024-7526 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2024-7531 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
MAL-2025-5108 Malicious code in crypt0graphyy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ec94110581ca3363bda748a7d59e0e82110dda02ec61092f85e7ef2d513f059e Package uses the template from https://github.com/thegoodhackertv/malpip to explore building malicious PyPI packages. --- Category: MALICIOUS - The campaign ha...
CGA-9X5W-3HVV-HCPV
Bulletin has no description...
CGA-J22J-W6JF-RC23
Bulletin has no description...
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...
Mattermost allows a remote actor to permanently delete local data by abusing dangerous error handling
Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled...
Mattermost failed to properly validate synced reactions
Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6 fail to properly validate synced reactions, when shared channels are enabled, which allows a malicious remote to create arbitrary reactions on arbitrary posts...
ASB-A-307288067
In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-339869945
Bulletin has no description...
CVE-2024-41264
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey method...
ASB-A-344434139
Bulletin has no description...