16955 matches found
Privilege Escalation
github.com/external-secrets/external-secrets is vulnerable to privilege escalation. The vulnerability is due to improper configuration of the ClusterRole, which grants "get/list" verbs for secrets resources and "path/update" verb for validating webhook configurations. It allows an attacker to abu...
PT-2024-6661 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to DLL hijacking in the management console of Ivanti Workspace Control, which allows a local authenticated attacker to escalate their privileges. This is...
PT-2024-12597 · Loftware · Loftware Spectrum
Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 5.1 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No information is...
PT-2024-9884
Name of the Vulnerable Software and Affected Versions: Nix versions 2.24 through 2.24.5 Nix version 2.24 prior to 2.24.6 Description: A bug in Nix allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the...
Sensitive Information Exposure
github.com/consensys/gnark is vulnerable to Sensitive Information Exposure. The vulnerability is caused by the same σ being used for all proofs of knowledge for commitments, allowing mixing between them. This makes it possible to fix the value of all but one commitment before selecting the circui...
PT-2024-30941 · Onlyoffice · Onlyoffice Docs
Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Docs versions prior to 8.1.0 Description: The issue is related to a cross-site scripting XSS flaw in ONLYOFFICE Docs, which occurs through a GeneratorFunction Object attack on a macro. This is connected to the use of an...
BELL-CVE-2023-52916
Bulletin has no description...
BELL-CVE-2024-8443
Bulletin has no description...
GO-2024-3119 Path traversal vulnerability in stripe-cli in github.com/stripe/stripe-cli
Path traversal vulnerability in stripe-cli in github.com/stripe/stripe-cli...
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...
BELL-CVE-2024-8418
Bulletin has no description...
BELL-CVE-2024-44995
Bulletin has no description...
BELL-CVE-2024-44983
Bulletin has no description...
BELL-CVE-2024-44982
Bulletin has no description...
BELL-CVE-2024-44955
Bulletin has no description...
BELL-CVE-2024-45005
Bulletin has no description...
BELL-CVE-2024-45000
Bulletin has no description...
BELL-CVE-2024-44986
Bulletin has no description...