8115 matches found
Directory traversal
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component...
v-z.ru Cross Site Scripting vulnerability OBB-3865416
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-27764
An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component...
CVE-2024-27765
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component...
Google Chrome Security Vulnerability
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 122.0.6261.111, which stems from memory access overruns in V8...
openSUSE: Security Advisory for binutils (SUSE-SU-2023:3825-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-24512
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
CVE-2024-24511
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...
Cross site scripting
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...
Remote code execution
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-22891
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-24511
CVE-2024-24511 affects PKP OPEN JOURNAL SYSTEMS (PKP OJS) v3.4, with a Cross Site Scripting vulnerability in the Input Title component that could allow an attacker to execute arbitrary code. The public sources consistently cite PKP OJS 3.4 as vulnerable and describe the issue as a stored XSS vect...
CVE-2024-24512
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
CVE-2024-22891
CVE-2024-22891 affects Nteract v0.28.0 and is a Remote Code Execution (RCE) via Markdown links. The issue arises from using Electron WebView with nodeIntegration enabled in the Markdown parser, enabling an attacker to achieve RCE by crafting a link or shared file. The CVSS v3.1 impact is high (CV...
CVE-2024-24511
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...
CVE-2024-22891
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-26619 riscv: Fix module loading free order
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-free error...
CVE-2024-26619 riscv: Fix module loading free order
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-free error...
NVIDIA D3D10 Driver Shader Functionality out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2023-1849 NVIDIA D3D10 Driver Shader Functionality out-of-bounds read vulnerability February 29, 2024 CVE Number CVE-2024-0071 SUMMARY An out-of-bounds read vulnerability exists in the Shader functionality of NVIDIA D3D10 Driver, Version 546.01, 31.0.15.4601. A...