16956 matches found
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
CVE-2024-23849
In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...
CVE-2024-23851
copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...
The vulnerability in Intel NUC’s built-in software, related to errors in processing input data, allows attackers to exploit their privileges.
The vulnerability of Intel NUC’s built-in software is related to errors in processing input data. Exploiting this vulnerability can allow attackers to gain increased privileges...
PT-2024-3256 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.7 MediaWiki versions 1.40.x prior to 1.40.3 MediaWiki versions 1.41.x prior to 1.41.1 Description: The issue is related to the incorrect neutralization of input during web page creation in the...
PT-2024-1776 · Apple · Macos Sonoma +5
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.3 iOS versions prior to 17.3 and 16.7.5 iPadOS versions prior to 17.3 and 16.7.5 macOS Sonoma versions prior to 14.3 Safari versions prior to 17.3 Description: A privacy issue was addressed with improved handling ...
MAL-2024-139 Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d01a5cf41e8dc5e1f1997a92ef62717b51538e2d3a2c481a7127e22e291101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...
CVE-2024-23684 upokecenter CBOR Denial of Service
Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...
CVE-2024-23683 Artemis Java Test Sandbox InvocationTargetException Subclass Escape
Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code...
Denial Of Service
libarchive.so is vulnerable to Denial Of Service. The vulnerability is due to improper input validation in the WARC parser within the warcread function in libarchive/archivereadsupportformatwarc.c. This issue can be exploited by an attacker via crafting a malicious WARC file resulting in Denial O...
CVE-2024-22563
openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...
CVE-2024-22402 Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist
Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed this may present a permissions bypass. It i...
OPENSUSE-SU-2024:0023-1 Security update for libuev
This update for libuev fixes the following issues: - Update to 2.4.1: Update README with list of moden Linux APIs used Fix 27: possible buffer overrun in uevrun boo1218749 CVE-2022-48620...
CVE-2024-0669 Cross-Frame Scripting (XFS) on Plone CMS
A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element...
BELL-CVE-2024-0646
Bulletin has no description...
EFS Software Easy File Sharing (EFS) Web Server Security Vulnerability
Efs Software EFS Software Easy File Sharing EFS Web Server is a suite of file sharing software from the Dutch company Efs Software. The software includes a forum site, file uploading, downloading, sharing and image sharing. A security vulnerability exists in EFS Software Easy File Sharing EFS Web...
GO-2024-2464 Remote command execution in github.com/0xJacky/Nginx-UI
Remote command execution in github.com/0xJacky/Nginx-UI...