@1-kb/emoji-picker (=0.0.1-alpha.11), @11ty/eleventy-plugin-vite (>=1.0.0 <=1.0.0-canary.3) +1528 more potentially affected by CVE-2024-45812 via vite (>=0.14.4 <=3.2.1)

vite NPM version =0.14.4, =1.0.0, =0.0.3, =1.0.1, =1.0.12, =0.0.4, =1.0.1, =0.0.1, =0.0.1, =0.0.12, =1.1.0, =1.0.0, =0.0.1, =0.0.11 - @agora-labs/paper-creator =0.0.5 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

be.jidoka:jdk-keycloak-admin (>=2.0.0 <=2.3.0), cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1 <=0.0.2) +610 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (>=1.0-alpha-1 <=23.0.7)

org.keycloak:keycloak-core MAVEN version =1.0-alpha-1, =2.0.0, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.4.3, =1.4.3, =1.2.9, =1.6.0 and more Source cves: CVE-2023-6841 Source advisory: OSV:GHSA-W97F-W3HQ-36G2...

Joomla! 安全漏洞

Joomla! is a free, open-source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! versions 3.0.0 through 3.10.16-elts, 4.0.0 through 4.4.6, and 5.0.0 through 5.1.2, which stems from the stripImages and stripIframes methods not properly handling input, whi...

CVE-2023-50314

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713...

@9troisquarts/ant-form (>=2.3.0 <=6.0.1), @beliantech/bt-components (>=0.8.0 <=0.33.11) +105 more potentially affected by CVE-2024-43368 via trix (>=0.10.2 <=2.1.19)

trix NPM version =0.10.2, =2.3.0, =0.8.0, =0.1.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.1, =4.0.0-alpha.5, =4.0.0-alpha.1, =0.1.18, =0.1.85, =0.1.0, =0.2.0, =1.0.0, =1.1.1-beta.44 and more Source cves: CVE-2024-43368 Source advisory: OSV:GHSA-QM2Q-9F3Q-2VCV...

Joomla core 3.0.0-3.10.16-elts,4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated XSS vectors in Outputfilter::strip* methods vulnerability

Unauthenticated XSS vectors in Outputfilter::strip methods vulnerability discovered by ? in WordPress Core Joomla versions 3.0.0-3.10.16-elts,4.0.0-4.4.6,5.0.0-5.1.2...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +146 more potentially affected by CVE-2024-39863 via apache-airflow (>=1.8.2 <=2.9.1)

apache-airflow PYPI version =1.8.2, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.1, =0.2.9b1, =0.4.0, =0.1.0a1, =0.6.0, =0.1.1, =0.6.0 and more Source cves: CVE-2024-39863 Source advisory: OSV:PYSEC-2024-189...

a-data-processing (=0.0.1), ab-data-processing (=0.0.1) +847 more potentially affected by CVE-2024-2965 via langchain (>=0.0.100 <=0.2.4)

langchain PYPI version =0.0.100, =0.1.0, =0.1.7, =0.2.1, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =0.0.1, =1.1.2, =0.1.0, =0.0.18, =0.0.19b2 and more Source cves: CVE-2024-2965 Source advisory: OSV:PYSEC-2024-118...

autorad (=0.2.6), bernn (>=0.1.3 <=0.3.2) +31 more potentially affected by CVE-2024-37057 via mlflow (>=2.0.0rc0 <=2.14.1)

mlflow PYPI version =2.0.0rc0, =0.1.3, =1.2.0, =0.8.0, =0.0.10, =1.0.0, =0.0.1, =0.1.0, =1.10.2, =0.1.2, =1.2.7, =1.6.1, =0.2.9, =0.3.0 - llm-foundry =0.9.0 and more Source cves: CVE-2024-37057 Source advisory: OSV:GHSA-J8MG-PQC5-X9GJ...

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2024-34392 via libxmljs (>=0.10.0 <=1.0.11)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2024-34392 Source advisory: OSV:GHSA-MG49-JQGW-GCJ6...

GOG Galaxy 安全漏洞

GOG Galaxy is a game client program from the Polish company GOG. The program is used to install, launch and update games. A security vulnerability exists in GOG Galaxy versions 2.0.67.2 through v2.0.71.2, which stems from a privilege escalation issue that allows an authenticated user to change...

br.com.labbs:quarkus-monitor-reactive-deployment (=1.0.4), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0 <=2.0.0-alpha1) +44 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (>=1.11.0.Beta1 <=3.2.0.Final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version =1.11.0.Beta1, =1.0.0, =0.8.0, =0.8.0, =1.0.0, =1.0.3, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.30.0, =1.1.1.Final, =2.13.0.CR1, =3.2.0.Final and more Source cves: CVE-2023-5675 Source advisory: OSV:GHSA-25...

0data (=1.0.0), 1.1.1-version (=1.0.0) +5447 more potentially affected by CVE-2024-21511 via mysql2 (>=3.0.0-rc.1 <=3.9.6)

mysql2 NPM version =3.0.0-rc.1, =1.0.0, =0.0.4, =0.0.1, =1.0.0, =0.0.1-alpha.5, =0.0.1-alpha.4, =0.0.1-alpha.1, =0.1.6-alpha.2, =0.0.8, =0.0.166 and more Source cves: CVE-2024-21511 Source advisory: SNYK:JS-MYSQL2-6670046...

Saleor 安全漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. Saleor has a security vulnerability that stems from the presence of a customer address disclosure issue. Affected products...

Deno 安全漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. A security vulnerability exists in Deno versions v1.8.0 through 1.40.4 that stems from Deno incorrectly checking if the hostname of an imported descriptor is equal t...

PT-2024-20491 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.8.0 through 3.12.0 Description: An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This issue was reported via the GitHub Bug Bounty...

a-data-processing (=0.0.1), ab-data-processing (=0.0.1) +136 more potentially affected by CVE-2024-2057 via langchain-community (>=0.0.1 <=0.0.25)

langchain-community PYPI version =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.0.1, =0.0.13, =0.0.25 and more Source cves: CVE-2024-2057 Source advisory: OSV:PYSEC-2024-278...

2vyper (=0.3.0), ape-dasy (=0.1.0) +28 more potentially affected by CVE-2024-26149 via vyper (>=0.1.0b12 <=0.3.9)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.6 and more Source cves: CVE-2024-26149 Source advisory: OSV:GHSA-9P8R-4XP4-GW5W...

PT-2024-12316 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0.0 through 10.0.6.1 Description: The issue allows an attacker on the network to take control of the server due to insecure calls. Recommendations: For versions 10.0.0.0 through 10.0.6.1, consider...

2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2024-24561 via vyper (>=0.1.0b12 <=0.4.0)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2024-24561 Source advisory: OSV:PYSEC-2024-149...