16956 matches found
MAL-2024-1285 Malicious code in djs-embeds-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2024-24856
Bulletin has no description...
PT-2024-19588 · Unknown · Axe Credit Portal
Name of the Vulnerable Software and Affected Versions: Axe Credit Portal versions 3.0 and later Description: The issue allows authenticated attackers to execute unintended queries and disclose sensitive information from database tables via crafted requests, specifically through the Save Favorite...
PT-2024-11745 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: An issue was discovered in the CapsuleIFWUSmm driver, which does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...
PT-2024-33781 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.1.0 through 16.11.4 GitLab CE/EE versions 17.0.0 through 17.0.2 GitLab CE/EE versions 17.1.0 Description: An issue has been discovered in GitLab CE/EE that allowed for a CSRF attack on GitLab's GraphQL API, leading to...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to an XML External Entity (XXE) injection vulnerability (CVE-2024-22354)
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is vulnerable to an XML External Entity XXE injection vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...
BELL-CVE-2024-26921
Bulletin has no description...
VikBooking < 1.6.8 - Insecure Direct Object References
Description The plugin allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the plugin's they shouldn't be allowed to. PoC https://example.com/wp-admin/admin.php?option=comvikbooking=config...
BELL-CVE-2024-26915
Bulletin has no description...
BELL-CVE-2024-26914
Bulletin has no description...
BELL-CVE-2024-26896
Bulletin has no description...
BELL-CVE-2024-26895
Bulletin has no description...
BELL-CVE-2024-26913
Bulletin has no description...
BELL-CVE-2024-26893
Bulletin has no description...
BELL-CVE-2024-26881
Bulletin has no description...
BELL-CVE-2024-26889
Bulletin has no description...
BELL-CVE-2024-26876
Bulletin has no description...
BELL-CVE-2024-26879
Bulletin has no description...