16956 matches found
PT-2024-23473 · Whizzy · Whizzy
Name of the Vulnerable Software and Affected Versions: Whizzy versions 1.1.18 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. Recommendations: For versions 1.1.18 and earlier, update to a version that contains a fix for this issu...
BELL-CVE-2023-52629
Bulletin has no description...
CVE-2024-29024 JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the Insecure Direct Object Reference IDOR vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromisi...
Pods < 3.1 - Contributor+ Remote Code Execution
Description The plugin is vulnerable to Remote Code Execution via shortcode, allowing authenticated attackers, with contributor level access or higher, to execute code on the server...
Un-sanitized metric name or labels can be used to take over exported metrics
In code which applies un-sanitized string values into metric names or labels, like this: swift let lang = try? request.query-getString.self, at: "lang" Counter label: "language", dimensions: "lang", lang ?? "unknown" an attacker could make use of this and send a ?lang query parameter containing...
Authorization Bypass
@oneuptime/common-server and @oneuptime/model are vulnerable to Authorization Bypass Through User-Controlled Key. The vulnerability is due to improper validation of the ismasteradmin key stored in the browser local storage. Attackers can manipulate this key from false to true, granting themselves...
Remote Code Execution
rdoc is vulnerable to Remote Code Execution. The vulnerability is due to unrestricted class restoration when parsing .rdocoptions as a YAML file, allowing for object injection and code injection...
Remote Code Execution (RCE)
johnbillion/wp-crontrol is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation of PHP code, which can result RCE...
Privilege Escalation
wixtoolset.util.wixext and wix are vulnerable to Privilege Escalation. The vulnerability is due to the improper handling of directory operations within the RemoveFolderEx function, which allows a standard users to delete protected directories by exploiting directory junctions...
BELL-CVE-2024-27281
Bulletin has no description...
BELL-CVE-2024-26651
Bulletin has no description...
BELL-CVE-2024-26652
Bulletin has no description...
BELL-CVE-2024-2004
Bulletin has no description...
BELL-CVE-2024-2379
Bulletin has no description...
CVE-2023-33528
halo v1.6.0 is vulnerable to Cross Site Scripting XSS...
ROS-20240328-01
GLPI's asset management and data center management software vulnerability is related to the SQL code injection through administration of dashboards. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary SQL queries...
CVE-2024-20265
A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...
CVE-2024-2466 TLS certificate check bypass with mbedTLS
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate...
Denial Of Service (DOS)
github.com/mattermost/mattermost-server is vulnerable to a Denial of Service. The vulnerability is due to missing limits on the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages...