3297 matches found
Avenwu Whistle Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine...
RHSA-2024:10882 Red Hat Security Advisory: postgresql security update
Bulletin has no description...
RHSA-2024:10880 Red Hat Security Advisory: firefox security update
Bulletin has no description...
BELL-CVE-2024-47607
Bulletin has no description...
MAL-2024-11415 Malicious code in oss-feature-flags (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11357 Malicious code in evocateur_libnpmpublisher (npm)
--- -= Per source details. Do not edit below this line.=-...
DLA-3989-1 ruby-doorkeeper - security update
Bulletin has no description...
MAL-2024-11317 Malicious code in byted-guide (npm)
--- -= Per source details. Do not edit below this line.=-...
RHSA-2024:10844 Red Hat Security Advisory: firefox security update
Bulletin has no description...
DLA-3984-1 zabbix - security update
Bulletin has no description...
RHSA-2024:10836 Red Hat Security Advisory: python-tornado security update
Bulletin has no description...
RHSA-2024:10834 Red Hat Security Advisory: ruby:3.1 security update
Bulletin has no description...
BELL-CVE-2024-53133
Bulletin has no description...
BELL-CVE-2024-53129
Bulletin has no description...
BELL-CVE-2024-53125
Bulletin has no description...
PT-2024-10156 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.0 through 17.4.6 GitLab CE/EE versions 17.5 through 17.5.4 GitLab CE/EE versions 17.6 through 17.6.2 Description: The issue is related to the GraphQL Mutation Handler component of the GitLab platform, which can lead t...
SUSE-SU-2024:4219-1 Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122222 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273. - CVE-2024-41059: hfsplus: fix...
Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website. Several administrator routes are unprotected against Cross-Site Request Forgery CRSF attacks...
