17016 matches found
PT-2024-27732 · Datagear · Datagear
Name of the Vulnerable Software and Affected Versions: DataGear versions 5.0.0 and earlier Description: A SpEL Spring Expression Language expression injection issue was found in the Data Viewing interface. This allows for potential malicious activity via the injection of expressions...
GHSA-MVRM-FH8Q-6WR2 Remote Code Execution via path traversal bypass in lollms
CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...
BELL-CVE-2024-38633
Bulletin has no description...
BELL-CVE-2024-38623
Bulletin has no description...
BELL-CVE-2024-38390
Bulletin has no description...
BELL-CVE-2024-38622
Bulletin has no description...
BELL-CVE-2024-36477
Bulletin has no description...
CVE-2024-6239 Poppler: pdfinfo: crash in broken documents when using -dests parameter
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service...
BELL-CVE-2024-38610
Bulletin has no description...
BELL-CVE-2024-38617
Bulletin has no description...
BELL-CVE-2024-38613
Bulletin has no description...
BELL-CVE-2024-38611
Bulletin has no description...
BELL-CVE-2024-38612
Bulletin has no description...
BELL-CVE-2024-38604
Bulletin has no description...
BELL-CVE-2024-38592
Bulletin has no description...
BELL-CVE-2024-38590
Bulletin has no description...
BELL-CVE-2024-38587
Bulletin has no description...
BELL-CVE-2024-38597
Bulletin has no description...