16955 matches found
CVE-2024-33854
A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23...
GHSA-FXC2-8M62-M85X LlamaIndex includes an exec call for `import {cls_name}`
An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...
BIT-VALKEY-2022-31144 Potential heap overflow in Redis
Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version...
BIT-KEYDB-2022-24834 Heap overflow issue with the Lua cjson library used by Redis
Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...
Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036)
Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...
GHSA-4WW8-FPRQ-CQ34 Mattermost doesn't redact remote users' original email addresses
Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0, 9.8.x = 9.8.2, when shared channels are enabled, fail to redact remote users' original email addresses stored in user props when email addresses are otherwise configured not to be visible in the local server...
BELL-CVE-2024-43865
Bulletin has no description...
BELL-CVE-2024-43850
Bulletin has no description...
BELL-CVE-2024-43849
Bulletin has no description...
BELL-CVE-2024-43859
Bulletin has no description...
BELL-CVE-2024-43831
Bulletin has no description...
BELL-CVE-2024-43841
Bulletin has no description...
BELL-CVE-2024-43839
Bulletin has no description...
BELL-CVE-2024-43825
Bulletin has no description...
BELL-CVE-2024-43818
Bulletin has no description...
BELL-CVE-2024-42320
Bulletin has no description...
BELL-CVE-2024-42318
Bulletin has no description...
BELL-CVE-2024-42315
Bulletin has no description...