13092 matches found
MAL-2024-7719 Malicious code in stylesnox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231ba61276a9baae8583e87d40a97b7ee4c4dff960555a6df856c57ed2adff0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7720 Malicious code in stylesshert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5cac694a4e67bb70870e3509a7d3944cb0cac1bad16defa2f01f1710d070b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-9375-QWVV-6HQP
Bulletin has no description...
CGA-FXJ9-R43F-W6VJ
Bulletin has no description...
Remote Code Execution (RCE)
.NET is vulnerable to Remote Code Execution RCE. The vulnerability is due to data corruption in Kestrel HTTP/3 server, which can result in remote code execution. An attacker can exploit this to execute arbitrary code on the affected system...
GHSA-9JMF-237G-QF46 vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-QG2P-9JWR-MMQF vulnerabilities
Vulnerabilities for packages: py3-django...
GHSA-X7Q2-WR7G-XQMF vulnerabilities
Vulnerabilities for packages: py3-django...
BELL-CVE-2024-22018
Bulletin has no description...
CVE-2024-30105 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2024-21731
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method...
CVE-2024-6612 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-6615 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-6605 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-37486 WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5...
CVE-2024-37829
The CVE-2024-37829 issue affects Outline ≤ v0.76.1 and enables a session hijacking attack when a user interacts with a crafted magic sign-in link. The consolidated sources confirm the vulnerability but provide no concrete remediation details (e.g., patched version) within the supplied documents. ...
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges...
BELL-CVE-2024-39484
Bulletin has no description...