16955 matches found
BELL-CVE-2024-44991
Bulletin has no description...
BELL-CVE-2024-44987
Bulletin has no description...
BELL-CVE-2024-44972
Bulletin has no description...
BELL-CVE-2024-44984
Bulletin has no description...
BELL-CVE-2024-44970
Bulletin has no description...
BELL-CVE-2024-44954
Bulletin has no description...
BELL-CVE-2024-44957
Bulletin has no description...
CVE-2024-45157
An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLSPSAHMACDRBGMDTYPE does not cause the PSA subsystem to use HMACDRBG: it uses HMACDRBG only when MBEDTLSPSACRYPTOEXTERNALRNG and...
Hughes WL3000 Fusion Software 安全漏洞
Hughes WL3000 Fusion Software is a hardware software system from Hughes Corporation, USA. A security vulnerability exists in Hughes WL3000 Fusion Software versions prior to 2.7.0.10 that originates from credentials used to access device configuration information stored unencrypted in flash memory...
CVE-2024-34660
Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...
BELL-CVE-2024-6119
Bulletin has no description...
BELL-CVE-2024-45310
Bulletin has no description...
BELL-CVE-2024-6232
Bulletin has no description...
Template Injection
@blakeembrey/template is vulnerable to Template Injection. The vulnerability is due to insufficient validation of the template name within the file index.ts, allowing untrusted input to be used as the template display name...
PT-2024-31674 · Zimbra · Zimbra Daffodil
Name of the Vulnerable Software and Affected Versions: Zimbra Daffodil version 10.1.1 Description: A Cross-Site Scripting XSS issue was resolved due to inadequate validation of metadata's Content-Type when importing files into the briefcase. Recommendations: For Zimbra Daffodil version 10.1.1,...
Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034
This module enables you to configure a wiki-like input filter that allows users to create links to site and external content. The module doesn't sufficiently check if a user has access to some URLs before rendering them as links. This vulnerability is mitigated by the fact that an attacker must...
GHSA-Q765-WM9J-66QJ @blakeembrey/template vulnerable to code injection when attacker controls template input
Impact It is possible to inject and run code within the template if the attacker has access to write the template name. js const template = require'@blakeembrey/template'; template"Hello name!", "exploit && = console.log'success'; && function pwned"; Patches Upgrade to 1.2.0. Workarounds Don't pa...
CVE-2024-8381
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This vulnerability affects Firefox 130, Firefox ESR 128.2, Firefox ESR 115.15, Thunderbird 128.2, and Thunderbird 115.15...
Division By Zero Error
TensorFlow is vulnerable to a division by zero error. The vulnerability is due to insufficient handling of cases where the input's fourth dimension is zero in the DepthwiseConv TFLite operator, which can allows to execution issues or crashes in machine learning models...