16955 matches found
BELL-CVE-2024-50117
Bulletin has no description...
BELL-CVE-2024-50092
Bulletin has no description...
BELL-CVE-2024-50095
Bulletin has no description...
MAL-2024-10515 Malicious code in ozeppelinsolidty (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8782fd9ae20110e20991e5f5898607ecadbf1725bf33bbda2dd60389ae613eeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11573 Malicious code in detectron4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 65b386bb525d3578f1345cf715ede6e58c9aae5fe31200cb381ac39ff51415e2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
SQL Injection
funadmin/funadmin is vulnerable to SQL injection. The vulnerability is due to insufficient input validation in the /curd/table/edit endpoint, which allows untrusted data to be directly used in SQL queries without proper sanitization or escaping...
PT-2024-39949 · WordPress · Wp Image Zoom
Name of the Vulnerable Software and Affected Versions: Wp-ImageZoom WordPress plugin versions prior to 1.1.1 Description: The Wp-ImageZoom WordPress plugin does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting issue. This...
CGA-8XFH-97RJ-WP87
Bulletin has no description...
CGA-3CPM-645Q-6MJ3
Bulletin has no description...
CVE-2024-20107
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09124360; Issue ID: MSV-1823...
OSV-2024-1261 Stack-buffer-overflow in _pcre2_compile_class_not_nested_16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515526 Crash type: Stack-buffer-overflow WRITE 2 Crash state: pcre2compileclassnotnested16 compileclassoperand pcre2compileclassnested16...
CVE-2024-47362
Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16...
BELL-CVE-2024-7883
Bulletin has no description...
CVE-2024-21510
Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into...
PT-2024-40621 · Apache · Apache Lucene
Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...
PT-2024-27419 · WordPress · Wpmet Elements Kit Elementor Addons
Name of the Vulnerable Software and Affected Versions: Wpmet Elements kit Elementor addons versions 3.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means...
PUB-A-350472698
In dhdprotflowringspoolrelease of dhdmsgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
BELL-CVE-2024-49767
Bulletin has no description...