259 matches found
Chainlit code issue vulnerabilities
Chainlit is an open-source large-scale dialogue interface framework developed by Chainlit. Versions of Chainlit prior to 2.9.4 contained code vulnerabilities. These vulnerabilities stemmed from improper handling of URL parameters during the update process for projects/elements, which could lead t...
Korenix JetNet Improper Verification of Cryptographic Signature (CVE-2023-5347)
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01. This plugin only works with Tenable.ot...
Arcane operating system command injection vulnerability
Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.13.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the update process, where command injection was possible, potentially allowing for t...
Arbitrary Command Injection
Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Arbitrary Command Injection due to the improper sanitazation of user-supplied packageName in the generateLockFile function of npm manager. An attacker can execute arbitrary commands on the host system b...
CVE-2020-7213
Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date versions are presented with a pop-up window for a parallelsupdates.xml file on the http://update.parallels.com web site...
CVE-2024-39872
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate...
CVE-2019-7323
GUP generic update process in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the...
EUVD-2017-17792
Malware in sbrugna...
EUVD-2019-5857
Malware in sbrugna...
EUVD-2008-3422
Malware in sbrugna...
EUVD-2019-16866
Malware in sbrugna...
EUVD-2017-17793
Malware in sbrugna...
EUVD-2020-28345
Malware in sbrugna...
EUVD-2017-7706
Malware in sbrugna...
EUVD-2025-26421
Malicious code in bioql PyPI...
EUVD-2025-5489
Malicious code in bioql PyPI...
EUVD-2022-27929
Malicious code in bioql PyPI...
EUVD-2022-27924
Malicious code in bioql PyPI...