16955 matches found
CVE-2024-47836 Admidio vulnerable to HTML Injection In The Messages Section
Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue...
MAL-2024-9894 Malicious code in unwilling-emerald-bonobo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9781 Malicious code in princedevmt-test-1 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9589 Malicious code in dp-bpsc-tiktok-music (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9571 Malicious code in core-linux-x64-musl (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9547 Malicious code in client-cognito-identity-provider (npm)
--- -= Per source details. Do not edit below this line.=-...
BELL-CVE-2024-8376
Bulletin has no description...
CVE-2024-9953
A potential denial-of-service DoS vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restrict...
CVE-2024-43701
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
OSV-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile...
PT-2025-20401
Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions 9.4.0 through 9.4.56 Description A buffer can be incorrectly released when Eclipse Jetty encounters a gzip error while inflating a request body. This can result in corrupted and/or inadvertent sharing of data between...
CVE-2024-48040 WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan: from n/a through = 0.21.8...
Command Injection
github.com/icewhaletech/casaos is vulnerable to a Command Injection. The vulnerability is due to lack of proper input validation and sanitization mechanisms via the component leave or join zerotier api, allows attackers to inject malicious commands into the system, which can then be executed...
BELL-CVE-2024-47670
Bulletin has no description...
BELL-CVE-2024-47663
Bulletin has no description...
BELL-CVE-2024-47661
Bulletin has no description...
BELL-CVE-2024-47669
Bulletin has no description...
BELL-CVE-2024-47667
Bulletin has no description...