13092 matches found
CVE-2024-31741
Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login...
CVE-2024-33665
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in Binutils [ CVE-2021-46174]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in Binutils, caused by a heap-based buffer overflow in the bfdgetl32 function CVE-2021-46174. Binutils is used in our Speech Services runtimes. This vulnerabilitiy has been addressed. Please...
Observable Discrepancy
Bouncy Castle is vulnerable to Observable Discrepancy. The vulnerability is due to improper handling of exceptions in RSA-based handshakes. An attacker can exploit the timing differences observed during these exceptions to reveal sensitive information...
CVE-2024-33661
Portainer before 2.20.0 allows redirects when the target is not index.yaml...
CVE-2024-33663
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...
BELL-CVE-2024-26922
Bulletin has no description...
CVE-2024-30800
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function...
BELL-CVE-2024-32473
Bulletin has no description...
PYSEC-2024-250
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...
BELL-CVE-2024-26897
Bulletin has no description...
BELL-CVE-2024-26863
Bulletin has no description...
BELL-CVE-2024-26865
Bulletin has no description...
BELL-CVE-2024-26839
Bulletin has no description...
BELL-CVE-2024-26832
Bulletin has no description...
BELL-CVE-2024-26833
Bulletin has no description...
BELL-CVE-2024-26825
Bulletin has no description...
BELL-CVE-2024-26818
Bulletin has no description...