CVE-2023-39742

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c...

MAL-2023-1569 Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1566 Malicious code in devops-challenge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae82cf2333c3027eb9266e05dfa4697724ae1623e3b662c2b129d5f716f55aa4 The OpenSSF Package Analysis project identified 'devops-challenge' @ 99.99.990 npm as malicious. It is considered malicious because: - The packa...

EPA expression to allow MAC OS versions

EPA Nfactor policy expression to allow MAC OS...

CVE-2021-40264

NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImageCloneTag function inFreeImageTag.cpp...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

CVE-2022-34038

Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability...

CVE-2023-26469

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server...

GHSA-8FP9-43PW-56VW PandasAI vulnerable to arbitrary code execution

An issue in pandas-ai v.0.8.1 and before allows a remote attacker to execute arbitrary code via the isjailbreak function...

DLA-3529-1 datatables.js - security update

Bulletin has no description...

PT-2023-26921 · Unknown · Servicewifiresources

Name of the Vulnerable Software and Affected Versions: ServiceWifiResources affected versions not specified Description: The issue is related to insecure signatures in the ServiceWifiResources module. Successful exploitation may cause ServiceWifiResources to be maliciously modified and overwritte...

CVE-2020-25915

Cross Site Scripting XSS vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted userlogin...

OSV-2023-685 Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339 Crash type: Invalid-free Crash state: resetcontext cmtdecodeprometheuscreate cmetricsdecodefuzz.c...

EUVD-2023-41815

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

GHSA-9RHF-Q362-77MX Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers

A vulnerability was identified in Consul such that using JWT authentication for service mesh incorrectly allows/denies access regardless of service identities. This vulnerability, CVE-2023-3518, affects Consul 1.16.0 and was fixed in 1.16.1...

GHSA-MXC9-G6M4-2V35 Magento Open Source allows Improper Neutralization of Special Elements Used

Adobe Commerce versions 2.4.6-p1 and earlier, 2.4.5-p3 and earlier and 2.4.4-p4 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated...

GHSA-RPV2-G4PC-WP72 Magento Open Source allows XML Injection

Adobe Commerce versions 2.4.6-p1 and earlier, 2.4.5-p3 and earlier and 2.4.4-p4 and earlier are affected by a XML Injection aka Blind XPath Injection vulnerability that could lead in minor arbitrary file system read. Exploitation of this issue does not require user interaction...

Command Injection

scancodeio is vulnerable to Command Injection. The vulnerability exists due to the lack of validation in the dockerreference parameter of the fetchdockerimage function of fetch.py, which allows an attacker to append malicious commands through the docker fetch process...

.NET and Visual Studio Denial of Service Vulnerability

...

PT-2023-19182 · Creative Solutions.Net +1 · Creative Gallery Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQ...