13092 matches found
GHSA-FFJP-66MX-3QPJ Privilege escalation in beego
An issue was discovered in file profile.go. The MemProf and GetCPUProfile functions do not correctly check whether the created file exists. As a result attackers can launch attacks symlink attacks locally. Attackers can use this vulnerability to escalate privileges...
DLA-2969-1 asterisk - security update
Bulletin has no description...
Command injection in cocoapods-downloader
The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function when using hg, the url and/or revision, tag, branch is passed to the hg clone command in a way that additional flags can be set. The additional flags can...
CVE-2022-0922
The software does not perform any authentication for critical system functionality...
ASB-A-213239948
Bulletin has no description...
ASB-A-201574693
Bulletin has no description...
DSA-5111-1 zlib - security update
Bulletin has no description...
ASB-A-204905206
Bulletin has no description...
URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect
Impact Users of the requiresAuth middleware, either directly or through the default authRequired option, are vulnerable to an Open Redirect when the middleware is applied to a catch all route. If all routes under example.com are protected with the requiresAuth middleware, a visit to...
GHSA-JM67-JH3G-CG3F Path Traversal within joomla/archive tar class
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path...
GHSA-49FJ-QP6P-Q544 Variable Tampering within joomla/input class
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $REQUEST data...
GHSA-RC8Q-45V8-X6XC Path Disclosure within joomla/filesystem class
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...
Unrestricted Upload of File with Dangerous Type in Gogs
Impact The malicious user is able to upload a crafted config file into repository's .git directory with to gain SSH access to the server. All installations with repository upload enabled default are affected. Patches Repository file uploads are prohibited to its .git directory. Users should upgra...
SQL Injection
forkcms/forkcms is vulnerable to SQL Injection attacks. The ids parameter in getComments function is not properly sanitized, which allows a malicious user to inject and execute arbitrary SQL queries on the target system...
Arbitrary shell execution
Uses of shellexec and exec were not escaping filenames and configuration settings in most cases...
CVE-2021-43090
An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...
Simple Event Planner < 1.5.5 - Author+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its Event Options, such as eventorganiser, organiseremail and organisercontact which could allow users with a role as low as author to perform Cross-Site Scripting attacks...
Remote Code Execution (RCE)
poetrycore is vulnerable to remote code execution. The vulnerability exists in git.py when the application runs on Windows because the file hashes are not checked before installation which allows an attacker to inject and execute poetry commands...
CVE-2022-25766 Remote Code Execution (RCE)
The package ungit before 1.5.20 are vulnerable to Remote Code Execution RCE via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values remote and ref are passed to the git fetch command. By injecting some git options it was possible to get arbitrary...