Malicious code in resumecom-validations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb71bf1cb4ba925079e4cb0146386da6304565a1d20cdb7cba37959876f36320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-9JMF-237G-QF46 Django Path Traversal vulnerability

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...

CVE-2024-39330

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...

CVE-2024-39330

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generatefilename without replicating the file-path validations from the parent class, potentially allow directory traversal via certain...

MAL-2024-6683 Malicious code in argentinian_validations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ardm_validations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activerecord-strict_validations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activerecord-database-validations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6467 Malicious code in activerecord-database-validations (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-48711 tipc: improve size validations for received domain records

In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node to receive and process domainrecord structs from peer nodes to track their views of the network topology. This patch verifies that t...

CVE-2022-48711 tipc: improve size validations for received domain records

In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node to receive and process domainrecord structs from peer nodes to track their views of the network topology. This patch verifies that t...

CVE-2022-48711

In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node to receive and process domainrecord structs from peer nodes to track their views of the network topology. This patch verifies that t...

CVE-2022-48711

In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node to receive and process domainrecord structs from peer nodes to track their views of the network topology. This patch verifies that t...

systemd security update

239-82.0.1 - Fixed deletion issue for symlink when device is opened Orabug: 36228608 - Fix local-fs and remote-fs targets during system boot replaces old Orabug: 25897792 Orabug: 35871376 - 1A Add 'systemd-fstab-generator-reload-targets.service' file Orabug: 35871376 - 1B Add required rpms for...

BIT-DISCOURSE-2023-36466 Topic Title Validation Skipped When Changing Category in Discourse

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...

Cross-Site Scripting (XSS)

inter-mediator/fmdataapi is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in FMDataAPISample.php due to improper input validations which allows an attacker to inject and execute arbitrary JavaScript...

Improper Access Control

ezsystems/ezplatform is vulnerable to Improper Access Control. The vulnerability is caused by missing validations in the file download route used for downloading files by specifying the name of the downloaded file. An attacker can construct download URLs with filenames that have no relation to th...

Use After Free

libqpdf.so is vulnerable to Use After Free. The vulnerability exists due to a lack of entity value validations in the libqpdf parameter of PlAESPDF.cc. An attacker could exploit arbitrary code into the system...

Stored Cross-Site Scripting (XSS)

github.com/answerdev/answer is vulnerable to Stored Cross-Site Scripting XSS attacks. This vulnerability allows an attackers to target other users or administrators and gain control of their accounts via executing malicious JavaScript on victim's session due to insufficient user input validations...

CVE-2023-36466

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passe...