16955 matches found
PYSEC-2024-63
In Roundup before 2.4.0, classhelpers generic.help.html allow XSS...
CVE-2023-52291 Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution
In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...
BELL-CVE-2024-41008
Bulletin has no description...
BELL-CVE-2023-52886
Bulletin has no description...
Skupper uses a static cookie secret for the openshift oauth-proxy
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
CVE-2024-38446
NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user without their consent or knowledge via a modified UUID in a POST request...
CVE-2024-38447
NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report that belongs to an arbitrary user...
CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
BELL-CVE-2024-40992
Bulletin has no description...
BELL-CVE-2024-40994
Bulletin has no description...
BELL-CVE-2024-40987
Bulletin has no description...
BELL-CVE-2024-40983
Bulletin has no description...
BELL-CVE-2024-40977
Bulletin has no description...
BELL-CVE-2024-40980
Bulletin has no description...
BELL-CVE-2024-40976
Bulletin has no description...
BELL-CVE-2024-40974
Bulletin has no description...
BELL-CVE-2024-40972
Bulletin has no description...
BELL-CVE-2024-40973
Bulletin has no description...