16986 matches found
Cross-Site Request Forgery (CSRF)
mudler/localai is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is caused due to insufficient CSRF protection mechanisms on the model deletion functionality, which allows an attackers o trick victims into deleting installed models...
MAL-2024-7431 Malicious code in portal-ui-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ed4030d37e53e09fa9a44db9742e1fde7399bd6de75e13e86d290b88a22251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-PHG7-8MM9-GJ88 EGroupware mishandles an ORDER BY clause
EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajaxgetrows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting...
CGA-GPWC-7F5F-8M65
Bulletin has no description...
CGA-VC2M-GVQX-PVQX
Bulletin has no description...
BELL-CVE-2024-39474
Bulletin has no description...
CVE-2024-27713
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
PT-2024-27738 · 14Finger · 14Finger
Name of the Vulnerable Software and Affected Versions: 14Finger version 1.1 Description: Insecure permissions in the component "/api/admin/user" of 14Finger allow attackers to access all user information via a crafted GET request. The username and other sensitive information can be accessed throu...
CGA-X8CH-7XR6-V7P8
Bulletin has no description...
CGA-QMJV-7R35-XW92
Bulletin has no description...
CGA-JJQ8-CGX4-958M
Bulletin has no description...
CGA-CFCC-MP7X-G5P9
Bulletin has no description...
CGA-7V5M-29GM-44RR
Bulletin has no description...
CGA-8V46-6HFH-FJ75
Bulletin has no description...
CGA-6924-FRH9-HJJ5
Bulletin has no description...
CGA-43PF-P965-XFGH
Bulletin has no description...
CGA-WMW5-G5QR-5C95
Bulletin has no description...