16955 matches found
SQL Injection
centreon/centreon is vulnerable to SQL Injection. The vulnerability is caused due to a missing validation while constructing SQL queries...
BELL-CVE-2023-45896
Bulletin has no description...
MAL-2024-8096 Malicious code in kak-kupit-kriptovaliutu-v-rossii-cherez-tinkoff-investitsii-s21dt6n0d (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722439ce10201bd57480a22eff49b9404dd698bbc8e34f901c4259142722a1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Unspecified Vulnerability in Wireshark (CNVD-2024-39127)
Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark has a security vulnerability that stems from a crash in the NTLMSSP parser. No details...
CVE-2024-43700
xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...
BELL-CVE-2024-44943
Bulletin has no description...
CVE-2024-45435
Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function...
CVE-2024-45436
extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory...
Uncontrolled Resource Consumption
github.com/CosmWasm/wasmvm is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper handling of specifically crafted Wasm files, leading to high memory usage, potential slowdowns, crashes, and lock poisoning in the VM and potentially leads to DoS...
CVE-2024-20413
A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the...
CVE-2024-20413
CVE-2024-20413 affects Cisco NX-OS Software. A vulnerability arises from insufficient security restrictions when executing application arguments from the Bash shell, allowing an authenticated, local attacker with privileges to access Bash to elevate to network-admin on an affected device. The res...
BELL-CVE-2024-41996
Bulletin has no description...
BELL-CVE-2024-43802
Bulletin has no description...
BELL-CVE-2024-44939
Bulletin has no description...
BELL-CVE-2024-43908
Bulletin has no description...
BELL-CVE-2024-43904
Bulletin has no description...
BELL-CVE-2024-43907
Bulletin has no description...
BELL-CVE-2024-43900
Bulletin has no description...