346 matches found
EulerOS Virtualization 2.12.0 : python-lxml (EulerOS-SA-2024-2777)
According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of lxml before v4.9.1 allows attackers to access...
Fortinet FortiWeb - Multiple command injection vulnerabilities (FG-IR-21-157)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-157 advisory. - Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through...
BELL-CVE-2024-49856
Bulletin has no description...
BELL-CVE-2024-47710
Bulletin has no description...
BELL-CVE-2024-50041
Bulletin has no description...
BELL-CVE-2024-47755
Bulletin has no description...
BELL-CVE-2024-46834
Bulletin has no description...
PT-2024-38866 · Palo Alto Networks · Prisma Access Browser
Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: A vulnerability alert has been issued for Prisma Access Browser. The issue is related to a monthly vulnerability update. No specific details about the vulnerability, affected...
BELL-CVE-2024-41096
Bulletin has no description...
CVE-2024-37031
The CVE-2024-37031 entry describes a stored XSS vulnerability in Active Admin (Ruby on Rails) before 3.2.2, triggered when users create entities with arbitrary names used as dynamic form legends. The root cause is the dynamic name value being reflected in admin forms, enabling an attacker to inje...
BELL-CVE-2023-52862
Bulletin has no description...
PT-2024-25763 · Konga · Konga
Name of the Vulnerable Software and Affected Versions: Konga version 0.14.9 Description: The issue allows for Cross Site Scripting XSS via the username parameter. Recommendations: For Konga version 0.14.9, avoid using the username parameter until the issue is resolved...
BELL-CVE-2024-27016
Bulletin has no description...
Mageia: Security Advisory (MGASA-2024-0148)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2024-26825
Bulletin has no description...
BELL-CVE-2024-26853
Bulletin has no description...
PT-2024-22924 · WordPress · The Carousel
Name of the Vulnerable Software and Affected Versions: The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce plugin for WordPress versions up to, and including, 2.6.3 Description: The issue is...
BELL-CVE-2024-28835
Bulletin has no description...
TP-LINK Omada ER605 Buffer Overflow Vulnerability
The TP-LINK Omada ER605 is a VPN router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK Omada ER605 versions 1.0.1 through 2.2.3, which originates from a boundary error when the application processes untrusted input. A remote attacker could exploit the vulnerability ...