16955 matches found
CGA-4R86-GC45-JFF7
Bulletin has no description...
CGA-69VW-QGVR-7M9P
Bulletin has no description...
CGA-45M3-CJ8X-CRXC
Bulletin has no description...
CGA-2RJ5-23XP-8358
Bulletin has no description...
CGA-4M8H-VC25-9792
Bulletin has no description...
CGA-27H9-7FMH-FR22
Bulletin has no description...
CGA-262C-VX37-F9XH
Bulletin has no description...
MAL-2024-8971 Malicious code in design-system-migrations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e513e47a0b14012788a2eecf7f9518d5e4957fcaa0539897fe7def5201d214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8967 Malicious code in cktool.target.nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bb040f385e470a714f5c768de33070b7886ae03cb851e1ecb8812b15e94d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Telerik UI 命令注入漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...
The vulnerability of MediaTek’s WLAN microprogramming software chip allows a hacker to execute arbitrary code.
The vulnerability of the WLAN microprogramming software of MediaTek’s chips lies in the fact that the execution of operations goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Eval Injection
LangChain Experimental is vulnerable to Eval Injection. The vulnerability is due to the use of sympy.sympify which relies on eval in the LLMSymbolicMathChain, allowing attackers to execute arbitrary code in versions 0.1.17 through 0.3.0...
PT-2024-8655 · Zimbra · Zimbra Collaboration
Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS versions through 10.1 Description: A reflected Cross-Site Scripting XSS issue exists in the Briefcase module due to improper sanitization of file content by the OnlyOffice formatter. This occurs when the victim opens ...
CVE-2024-40441
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...
CGA-9969-43HG-MXVG
Bulletin has no description...
CVE-2024-37879
Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...
SOFA Hessian Remote Command Execution (RCE) Vulnerability
Impact SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the SOFA Hessian blacklist protection mechanism, and this gadget chain only relies on JDK and does not rely on...
CGA-7RRC-M48G-3G28
Bulletin has no description...