16956 matches found
CVE-2024-21392
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-1226
The CVE-2024-1226 entry concerns Rejetto Http File Server, where the software does not properly neutralize certain characters when data is placed in outgoing HTTP headers. This header injection can allow an attacker to control the HTTP response and potentially perform cross-site scripting and cac...
BELL-CVE-2023-39193
Bulletin has no description...
MAL-2024-1088 Malicious code in salesforce-service-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2023-52498
Bulletin has no description...
The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform, due to insufficient comparison, allows a hacker to execute arbitrary commands with privileged privileges.
The vulnerability of the software for network monitoring and control of IT infrastructure on the SolarWinds Platform is related to insufficient comparison. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with privileged privileges...
GO-2024-2618 Authentication token leak in github.com/cloudevents/sdk-go/v2
Using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak credentials to arbitrary endpoints. When the transport is populated with an authenticated transport, http.DefaultClient is modified with the authenticated transport...
XML Entity Expansion
libexpat is vulnerable to XML Entity Expansion. The vulnerability is caused due to insufficient input validation and handling of external entities in the XML parser. This allows an attacker to perform an XML Entity Expansion attack...
Inappropriate Implementation
Google Chrome is vulnerable to Inappropriate Implementation. The vulnerability is due to an implementation error in the V8 engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...
BELL-CVE-2023-52488
Bulletin has no description...
PT-2024-11665 · Ibm · Ibm Spss Statistics
Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 28.0 Description: The issue allows a local user to create multiple files, potentially exhausting the file handles capacity and causing a denial of service. Recommendations: For versions 26.0 through...
Automated-Mess-Management-System Security Vulnerability
Automated-Mess-Management-System is an automated measurement management system by the individual developer Boyiddhanath Roy. A security vulnerability exists in Automated-Mess-Management-System version 1.0, which stems from the fact that incorrect manipulation of the parameter name can lead to...
CVE-2024-0818
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6...
nGrinder vulnerable to unsafe Java objects deserialization
nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization...
BELL-CVE-2023-45290
Bulletin has no description...
BELL-CVE-2023-52604
Bulletin has no description...
BELL-CVE-2023-52607
Bulletin has no description...
BELL-CVE-2023-52598
Bulletin has no description...