16956 matches found
BELL-CVE-2023-52574
Bulletin has no description...
BELL-CVE-2023-52562
Bulletin has no description...
BELL-CVE-2023-52564
Bulletin has no description...
BELL-CVE-2023-52522
Bulletin has no description...
BELL-CVE-2023-52519
Bulletin has no description...
BELL-CVE-2023-52518
Bulletin has no description...
Overly Restrictive Account Lockout Mechanism
org.keycloak, keycloak-core is vulnerable to Overly Restrictive Account Lockout Mechanism. The vulnerability is due to improper handling of login attempts, which may allow a remote unauthenticated attacker to block other accounts from logging in by exploiting this flaw under certain conditions...
Cross Site Scripting(XSS)
org.apache.archiva, archiva-common is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected into web pages. This poses a risk of executing arbitrary code in the context of a user's...
PYSEC-2024-45
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...
The vulnerability of Intel SGX DCAP microprogramming software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Intel SGX DCAP microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
CVE-2024-25164
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...
CVE-2024-28084
p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...
Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting
Exploit Title: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting Date: 01-03-2024 Exploit Author: Shubham Pandey Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html...
Petrol Pump Management Software v.1.0 - SQL Injection
Exploit Title: Petrol Pump Management Software v.1.0 - SQL Injection Date: 01-03-2024 Exploit Author: Shubham Pandey Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html Version: 1.0 Tested on:...
CVE-2023-52532 net: mana: Fix TX CQE error handling
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type probably from a newer hardware, still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong. Also, TX errors can be triggered by...
BELL-CVE-2023-52497
Bulletin has no description...
GHSA-FHX8-5C23-X7X5 Cross Site Scripting vulnerability in Contribsys Sidekiq
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
CVE-2024-2059 SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...