17015 matches found
PT-2024-28057 · Nix +3 · Nix +3
Name of the Vulnerable Software and Affected Versions: Nix versions prior to 2.23.1 Nix versions prior to 2.22.2 Nix versions prior to 2.21.3 Nix versions prior to 2.20.7 Nix versions prior to 2.19.5 Nix versions prior to 2.18.4 Description: Nix is a package manager for Linux and other Unix syste...
PT-2024-9034 · Ivanti · Ivanti Policy Secure +1
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 and prior to 9.1R18.7 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to argument injection, allowing a remote authenticated attacker with admin privileges to...
The vulnerability of cloud software in creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the authentication procedures’ flaws, which allow attackers to bypass the authentication process.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the 2FA authentication process...
CVE-2024-5334 Local File Read in stitionai/devika
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
BELL-CVE-2024-39468
Bulletin has no description...
BELL-CVE-2024-39469
Bulletin has no description...
BELL-CVE-2024-39466
Bulletin has no description...
BELL-CVE-2024-39292
Bulletin has no description...
BELL-CVE-2024-39291
Bulletin has no description...
BELL-CVE-2024-35247
Bulletin has no description...
BELL-CVE-2024-39298
Bulletin has no description...
BELL-CVE-2024-38661
Bulletin has no description...
BELL-CVE-2024-38667
Bulletin has no description...
BELL-CVE-2024-37354
Bulletin has no description...
BELL-CVE-2024-38384
Bulletin has no description...
PT-2024-34936 · Unknown · Mudler/Localai
Name of the Vulnerable Software and Affected Versions: mudler/localai version 2.14.0 Description: A command injection issue exists due to the application's handling of the backend parameter in the configuration file. This parameter is used in the name of the initialized process, allowing an...
CGA-MJFG-M349-5324
Bulletin has no description...