13092 matches found
BELL-CVE-2024-37370
Bulletin has no description...
Autodesk AutoCAD Out-of-Bounds Read Vulnerability (CNVD-2024-33001)
Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. An out-of-bounds read vulnerability exists in Autodesk AutoCAD version 2024.1.4, which stems from a lack of proper validation of user-supplied data when parsing maliciously crafted SLDDRW files i...
CVE-2024-37371
In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields...
CVE-2024-39705 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-nltk, nemo...
CVE-2024-5755
In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...
CVE-2024-5548 Directory Traversal in stitionai/devika
A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the 'projectname' parameter in a GET request to download arbitrary files from the system. This issue...
CVE-2024-5535 vulnerabilities
Vulnerabilities for packages: openssl...
BIT-WORDPRESS-MULTISITE-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...
BELL-CVE-2024-39461
Bulletin has no description...
BELL-CVE-2024-39464
Bulletin has no description...
BELL-CVE-2024-39467
Bulletin has no description...
DSA-5722-1 libvpx - security update
Bulletin has no description...
CGA-JJ93-25VX-2V32
Bulletin has no description...
MAL-2024-7043 Malicious code in vacuole (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7037 Malicious code in telegram-notifications (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7031 Malicious code in stuck-it_up (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7018 Malicious code in ruby-playing_cards (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6974 Malicious code in living-dead (RubyGems)
--- -= Per source details. Do not edit below this line.=-...