16955 matches found
CGA-6587-QQ89-RJ6W
Bulletin has no description...
CGA-2JF2-CV87-Q7F5
Bulletin has no description...
Eval Injection
MindsDB is vulnerable to Eval Injection. The vulnerability is due to unsanitized input in several integrations, where a specially crafted 'UPDATE' query containing Python code is passed to an eval function and executed on the server...
GHSA-9GQ6-6936-885W MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the cod...
BELL-CVE-2024-23984
Bulletin has no description...
BELL-CVE-2024-45028
Bulletin has no description...
BELL-CVE-2024-45030
Bulletin has no description...
BELL-CVE-2024-45021
Bulletin has no description...
BELL-CVE-2024-45016
Bulletin has no description...
CGA-7XJ2-9G24-V4H5
Bulletin has no description...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of access control mechanisms. This allows attackers to bypass security restrictions.
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
CGA-WPX3-WH3G-7GWH
Bulletin has no description...
CGA-MVPH-H267-XMJ6
Bulletin has no description...
MGASA-2024-0289 Updated zziplib packages fix security vulnerability
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c. CVE-2024-39134...
CVE-2024-45591 XWiki Platform document history including authors of any page exposed to unauthorized actors
XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification both username...
CVE-2024-45044
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation i.e. "w" for "whoami" the ACL check did not apply to the full form i.e. "whoami" but to the abbreviated...
CGA-MW27-36P9-VW2R
Bulletin has no description...
CGA-7GVJ-VRJ5-XR46
Bulletin has no description...