16956 matches found
CGA-XMGP-MF9V-PPH8
Bulletin has no description...
CGA-28FJ-7RMV-XW55
Bulletin has no description...
CVE-2024-4754
CVE-2024-4754 describes a stored cross-site scripting vulnerability in Next4Biz CRM & BPM Software (Business Process Management). The issue arises from improper neutralization of input during web page generation, affecting BPM versions 6.6.4.4 and earlier, with a fix in 6.6.4.5. The CVE entry con...
PT-2024-27732 · Datagear · Datagear
Name of the Vulnerable Software and Affected Versions: DataGear versions 5.0.0 and earlier Description: A SpEL Spring Expression Language expression injection issue was found in the Data Viewing interface. This allows for potential malicious activity via the injection of expressions...
GHSA-MVRM-FH8Q-6WR2 Remote Code Execution via path traversal bypass in lollms
CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...
BELL-CVE-2024-38633
Bulletin has no description...
BELL-CVE-2024-38623
Bulletin has no description...
BELL-CVE-2024-38622
Bulletin has no description...
BELL-CVE-2024-38390
Bulletin has no description...
BELL-CVE-2024-36477
Bulletin has no description...
CVE-2024-6239 Poppler: pdfinfo: crash in broken documents when using -dests parameter
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service...
BELL-CVE-2024-38610
Bulletin has no description...
BELL-CVE-2024-38617
Bulletin has no description...
BELL-CVE-2024-38612
Bulletin has no description...
BELL-CVE-2024-38613
Bulletin has no description...
BELL-CVE-2024-38611
Bulletin has no description...
BELL-CVE-2024-38604
Bulletin has no description...
BELL-CVE-2024-38587
Bulletin has no description...