13092 matches found
CGA-JJ45-RQFH-MHQ4
Bulletin has no description...
CGA-7XPG-X857-4QF9
Bulletin has no description...
BELL-CVE-2024-35235
Bulletin has no description...
CVE-2024-5842 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-5834 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-5840 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-37296 Aimeos HTML client vulnerable to digital products download without proper payment status check
The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...
CVE-2024-5701 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-5695 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-5689 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
Local File Inclusion (LFI)
gradio is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper input validation in the postprocess function within jsoncomponent.py, where a user-controlled string is parsed as JSON which can be exploited to read arbitrary files on the remote system...
GHSA-V9QV-C7WM-WGMF Composer has multiple command injections via malicious git/hg branch names
Impact The composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. So this requires cloning untrusted repositories. Patches 2.2.24 for 2.2 LTS or 2.7.7 for mainline Workarounds Avoid cloning potentially compromised...
CGA-CM9X-7FJR-FCM9
Bulletin has no description...
CGA-3F38-VQC4-R77R
Bulletin has no description...
CGA-9RF9-Q23X-G8V6
Bulletin has no description...
GHSA-69FP-7C8P-CRJR vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2024-4403
A Cross-Site Request Forgery CSRF vulnerability exists in the restartprogram function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted CSRF...
CVE-2024-4577 vulnerabilities
Vulnerabilities for packages: php...