13630 matches found
ROOT-OS-DEBIAN-12-CVE-2024-28757 CVE-2024-28757 in expat - Patched by Root
Root has patched CVE-2024-28757 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-28863 CVE-2024-28863 in tar - Patched by Root
Root has patched CVE-2024-28863 in the tar package for Root:npm. Multiple fixed versions available...
DedeCMS - Open Redirect via download.php
Dedecms 5.71sp1 and earlier contain a URL redirect caused by a logic error that does not properly validate GET request input, letting attackers redirect users to arbitrary URLs, exploit requires sending crafted GET requests. id: CVE-2024-57241 info: name: DedeCMS - Open Redirect via download.php...
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting
WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...
LOLLMS WebUI - Absolute Path Traversal
An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...
Landray EKP - Path Traversal
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sysuicomponent/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to...
Tube Video Ads Lite - Reflected XSS
Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...
ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-22259 CVE-2024-22259 in org.springframework:spring-web - Patched by Root
Root has patched CVE-2024-22259 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-30171 CVE-2024-30171 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-30171 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-34447 CVE-2024-34447 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-34447 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root
Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-38829 CVE-2024-38829 in org.springframework.ldap:spring-ldap-core - Patched by Root
Root has patched CVE-2024-38829 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-45590 CVE-2024-45590 in body-parser - Patched by Root
Root has patched CVE-2024-45590 in the body-parser package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: The BR/EDR JUSTWORKS method has been aligned with LE. This alignment applies from version 92516cd97fd4 onward. The BR/EDR JUST WORKS method always requests user confirmation when using LE. This behavior is...
ROOT-APP-NPM-CVE-2024-21512 CVE-2024-21512 in mysql2 - Patched by Root
Root has patched CVE-2024-21512 in the mysql2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-53981 CVE-2024-53981 in python-multipart - Patched by Root
Root has patched CVE-2024-53981 in the python-multipart package for Root:PyPI. Multiple fixed versions available...