16955 matches found
PT-2024-35745 · Ragflow · Ragflow
Name of the Vulnerable Software and Affected Versions: RAGFlow version 0.13.0 Description: The issue is related to improper access control in the document-hooks.ts file, which allows unauthorized access to user documents. Recommendations: For RAGFlow version 0.13.0, consider restricting access to...
CVE-2024-55565
CVE-2024-55565 affects the Nano ID library. The issue is that nanoid mishandles non-integer values. The fixed versions noted are 5.0.9 and 3.3.8. There are no provided exploit details beyond this description. Affected scope includes Nano ID users relying on default generation behavior that could ...
MAL-2024-11299 Malicious code in apc-publish (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11293 Malicious code in admin-upload-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11286 Malicious code in a111y-cloud (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11277 Malicious code in @platform-ui-kit/components-library-react (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11271 Malicious code in @im-dims/baileys (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11264 Malicious code in @douinfe/create-semi-d2c-plugin (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11262 Malicious code in @cdh-data-portal-theme/build (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11244 Malicious code in nextcloud2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-37071
CVE-2024-37071 affects IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) on 10.5, 11.1, and 11.5. An authenticated user could cause a denial of service via a specially crafted query due to improper memory allocation (memory allocation flaw). Affected products include Db2/Db2 Conne...
BELL-CVE-2024-12254
Bulletin has no description...
PT-2024-17467 · WordPress · Shortcodes Blocks Creator Ultimate
Name of the Vulnerable Software and Affected Versions: Shortcodes Blocks Creator Ultimate plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...
CVE-2024-53473
WeGIA 3.2.0 before 3998672 does not verify permission to change a password...
CVE-2024-53589
A buffer overflow vulnerability exists in GNU Binutils’ objdump utility when processing tekhex format files. During format identification, the vulnerability occurs in the Binary File Descriptor BFD library’s tekhex parser. A specially crafted tekhex file, when processed by objdump, may trigger an...
CVE-2024-53808
CVE-2024-53808 : SQL Injection in WordPress plugin “NEX-Forms – Ultimate Form Builder” (Basix NEX-Forms) ≤ 8.7.8. Root cause: improper neutralization of input in SQL commands. Affected products/versions: NEX-Forms – Ultimate Form Builder up to 8.7.8. Exploitation status in provided docs: not indi...
BELL-CVE-2024-53140
Bulletin has no description...
BELL-CVE-2024-53130
Bulletin has no description...
Advisory ROSA-SA-2024-2538
software: libgsf 1.14.53 WASP: ROSA-CHROME packageevrstring: libgsf-1.14.53-1 CVE-ID: CVE-2024-42415 BDU-ID: 2024-08625 CVE-Crit: HIGH CVE-DESC.: A vulnerability in The GNOME Project's structured file library libgsf involves a dynamic memory-based integer overflow when processing the sector...