13092 matches found
CVE-2024-5494
Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-5497 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-5499 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-5498 vulnerabilities
Vulnerabilities for packages: chromium...
TYPO3 possible cache poisoning on the homepage when anchors are used
A request URL with arbitrary arguments, but still pointing to the home page of a TYPO3 installation can be cached if the configuration option config.prefixLocalAnchors is used with the values "all" or "cached". The impact of this vulnerability is that unfamiliar looking links to the home page can...
CVE-2024-36950 firewire: ohci: mask bus reset interrupts between ISR and bottom half
In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHCI interrupt handler, if a bus reset interrupt has occurred, mask bus reset interrupts until busresetwork has serviced and cleared the...
GHSA-95FR-CM4M-Q5P9 vulnerabilities
Vulnerabilities for packages: minio...
CVE-2024-32760 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality
Impact Stored Cross-site scripting XSS enable attackers to inject malicious code into Print Functionality Patches 12.1.4, 10.0.5 References https://docs.umbraco.com/umbraco-commerce/release-notesid-13.0.0-december-13th-2023...
CVE-2024-5274
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
BELL-CVE-2023-52880
Bulletin has no description...
OPENSUSE-SU-2024:0143-1 Security update for libqt5-qtnetworkauth
This update for libqt5-qtnetworkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString boo1224782...
CVE-2024-29215 Slash commands run in channel without channel membership via playbook task commands
Mattermost versions 9.5.x = 9.5.3, 9.7.x = 9.7.1, 9.6.x = 9.6.1, 8.1.x = 8.1.12 fail to enforce proper access control which allows a user to run a slash command in a channel they are not a member of via linking a playbook run to that channel and running a slash command as a playbook task command...
CVE-2024-5353
A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
BELL-CVE-2023-52878
Bulletin has no description...
BELL-CVE-2023-52875
Bulletin has no description...
BELL-CVE-2023-52871
Bulletin has no description...
BELL-CVE-2023-52868
Bulletin has no description...