BELL-CVE-2024-46738

Bulletin has no description...

BELL-CVE-2024-46745

Bulletin has no description...

BELL-CVE-2024-46733

Bulletin has no description...

BELL-CVE-2024-46725

Bulletin has no description...

BELL-CVE-2024-46723

Bulletin has no description...

BELL-CVE-2024-46715

Bulletin has no description...

CGA-HV6R-8QC7-V556

Bulletin has no description...

CGA-CQP4-MW73-RGWF

Bulletin has no description...

CGA-7378-F7QX-RG9H

Bulletin has no description...

Gematik Referenzvalidator 代码问题漏洞

Gematik Referenzvalidator is an open source tool from gematik. It is used for advanced validation of TI applications and Contoso resources for interoperability standards. A code issue exists in Gematik Referenzvalidator that stems from the use of insecure default settings in the Woodstox...

PT-2024-39362 · 123Solar · 123Solar

Name of the Vulnerable Software and Affected Versions: jeanmarc77 123solar version 1.8.4.5 Description: A problematic issue has been found in the software, affecting an unknown part of the file /detailed.php. The manipulation of the date1 argument leads to cross-site scripting. It is possible to...

CGA-4GRC-C3F3-FQ48

Bulletin has no description...

CGA-JJVG-G974-V9FQ

Bulletin has no description...

BELL-CVE-2024-7788

Bulletin has no description...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-8946 MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

CVE-2021-27916

Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mautic user had, they could delete files other than those in the media folders such as system files, libraries or other important files...

Contao affected by insert tag injection via canonical URL

Impact It is possible to inject insert tags in canonical URLs which will be replaced when the page is rendered. Patches Update to Contao 4.13.49, 5.3.15 or 5.4.3. Workarounds Disable canonical tags in the settings of the website root page. References...

CGA-3773-7829-WR2P

Bulletin has no description...

Code Injection

refuelautolabel is vulnerable to Code Injection. The vulnerability is due to improper handling of user-provided CSV files, where the eval function processes malicious code without validation, allowing an attacker to gain control of the system or execute unauthorized commands...