16956 matches found
BELL-CVE-2024-36979
Bulletin has no description...
PT-2024-20212 · Silicon · Gecko Os
Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko OS affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. No authentication is required to exploit this issue...
js2py allows remote code execution
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
BELL-CVE-2024-36977
Bulletin has no description...
SAMSUNG Magician PC Software Security Vulnerability
SAMSUNG Magician PC Software is an application from the South Korean company Samsung SAMSUNG. Designed to help manage Samsung SSDs. A security vulnerability exists in SAMSUNG Magician PC Software version 8.0.0. An attacker could exploit the vulnerability to elevate privileges by tampering with...
CGA-2HGJ-H4GF-P4V7
Bulletin has no description...
CGA-JGF5-4W5M-6H5J
Bulletin has no description...
CGA-5WXH-2846-4R2X
Bulletin has no description...
NULL Pointer Dereference
libgpac.so is vulnerable to NULL Pointer Dereference. The vulnerability is due to improper memory management within the swfsvgaddisosample function in src/filters/loadtext.c of the component MP4Box...
Cross-site Scripting (XSS)
moodle/moodle is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient escaping of calendar event titles, leading to a stored XSS risk in the event deletion prompt...
CGA-5V3J-934Q-GJ4M
Bulletin has no description...
BELL-CVE-2024-36973
Bulletin has no description...
CVE-2024-5899 Improper trust check in Bazel Build intellij plugin
When Bazel Plugin in intellij imports a project either using "import project" or "Auto import" the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance.createProject. This...
Buffer Overflow
libcdio is vulnerable to Buffer Overflow. The vulnerability is due to improper handling of ISO 9660 image files, which allows an attacker to execute arbitrary code when reading a crafted ISO 9660 image file...
PT-2024-27767 · Unknown · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions up to 19.0.1 Description: The issue concerns an arbitrary file upload vulnerability in the Upload Template function. This vulnerability allows attackers to execute arbitrary code by uploading a crafted .SQL file...
@cdr0/sg Prototype Pollution
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
GHSA-FG52-5JJJ-28H7 @cdr0/sg Prototype Pollution
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
Openfind Information Technology MailAudit Operating System Command Injection Vulnerability
Openfind Information Technology MailAudit is a software for enterprise email security auditing from Openfind Information Technology Taiwan, China. An operating system command injection vulnerability exists in Openfind Information Technology MailAudit, which originates from an inability to properl...
CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...