3 matches found
EUVD-2025-206910
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 o...
CVE-2024-43239
Authorization Bypass Through User-Controlled Key vulnerability in Masteriyo Masteriyo - LMS.This issue affects Masteriyo - LMS: from n/a through 1.11.4...
Gila CMS Upload Over Bypass Vulnerability
Gila CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in Gila CMS 1.11.4 and earlier versions. The vulnerability can be exploited to upload malicious files and execute code with the help of the 'moveAction' function in the...