16956 matches found
GO-2024-2531 1Panel set-cookie is missing the Secure keyword in github.com/1Panel-dev/1Panel
1Panel set-cookie is missing the Secure keyword in github.com/1Panel-dev/1Panel...
BIT-GITLAB-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
BELL-CVE-2024-37371
Bulletin has no description...
PT-2024-28752 · Perforce · Helix Alm
Name of the Vulnerable Software and Affected Versions: Helix ALM versions prior to 2024.2.0 Description: A local command injection issue was identified. The issue was reported by Bryan Riggins. Recommendations: For Helix ALM versions prior to 2024.2.0, update to version 2024.2.0 or later to resol...
PT-2024-28057 · Nix +3 · Nix +3
Name of the Vulnerable Software and Affected Versions: Nix versions prior to 2.23.1 Nix versions prior to 2.22.2 Nix versions prior to 2.21.3 Nix versions prior to 2.20.7 Nix versions prior to 2.19.5 Nix versions prior to 2.18.4 Description: Nix is a package manager for Linux and other Unix syste...
PT-2024-9034 · Ivanti · Ivanti Policy Secure +1
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 and prior to 9.1R18.7 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to argument injection, allowing a remote authenticated attacker with admin privileges to...
The vulnerability of cloud software in creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the authentication procedures’ flaws, which allow attackers to bypass the authentication process.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the 2FA authentication process...
CVE-2024-5334 Local File Read in stitionai/devika
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
BELL-CVE-2024-39468
Bulletin has no description...
BELL-CVE-2024-39469
Bulletin has no description...
BELL-CVE-2024-39466
Bulletin has no description...
BELL-CVE-2024-39292
Bulletin has no description...
BELL-CVE-2024-39291
Bulletin has no description...
BELL-CVE-2024-35247
Bulletin has no description...
BELL-CVE-2024-38667
Bulletin has no description...
BELL-CVE-2024-39298
Bulletin has no description...
BELL-CVE-2024-38661
Bulletin has no description...