13092 matches found
BELL-CVE-2024-38598
Bulletin has no description...
BELL-CVE-2024-38607
Bulletin has no description...
BELL-CVE-2024-6239
Bulletin has no description...
BELL-CVE-2024-38567
Bulletin has no description...
BELL-CVE-2024-38588
Bulletin has no description...
MAL-2024-1648 Malicious code in wordpress-theme-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11ba6949abd5e27add3ceeb9c4709ae17be63d4831af09c7f34ca236d3b06b8e The OpenSSF Package Analysis project identified 'wordpress-theme-core' @ 0.0.123 npm as malicious. It is considered malicious because: - The...
BELL-CVE-2024-36975
Bulletin has no description...
CVE-2024-6102 vulnerabilities
Vulnerabilities for packages: chromium...
WordPress Shortcode Addons Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)
Software Shortcode Addons Type Plugin Vulnerable versions = 3.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37121 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID eac9b5d824f4 Credits Jean Tirstan T Required privilege...
CGA-59HP-F8J9-2Q3X
Bulletin has no description...
CGA-C5F6-F2FF-F6G9
Bulletin has no description...
CGA-WFP6-6QJF-2G7H
Bulletin has no description...
CGA-7G57-QC49-WFWG
Bulletin has no description...
CGA-3VXQ-PJ3W-XVH2
Bulletin has no description...
GHSA-P5CG-6RFR-6MX8 Moodle stored XSS via calendar's event title when deleting the event
Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...
GHSA-34JH-P97F-MPXF vulnerabilities
Vulnerabilities for packages: reflex, py3.13-scanner-test-libraries, kubeflow-katib, airflow, ggshield, kubeflow-pipelines-visualization-server, nemo, nvidia-nsight-compute-13.1, az, request-1276, jwt-tool, barman, dask-gateway, superset, kubeflow-jupyter-web-app, py3-urllib3,...
DeepJavaLibrary API absolute path traversal
Summary DeepJavaLibraryDJL versions 0.1.0 through 0.27.0 do not prevent absolute path archived artifacts from inserting archived files directly into the system, overwriting system files. This is fixed in DJL 0.28.0 and patched in DJL Large Model Inference containers 0.27.0. Impacted versions: 0.1...
GHSA-JJ58-488V-4RGF obx Prototype Pollution
almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656, reduce @almela/obx/build/index.js:470, Object.set obx/build/index.js:269 component...
OPENSUSE-SU-2024:12866-1 keylime-ima-policy-0.2.0+git.1681457715.54484b7-1.1 on GA media
These are all security issues fixed in the keylime-ima-policy-0.2.0+git.1681457715.54484b7-1.1 package on the GA media of openSUSE Tumbleweed...