2886 matches found
UBUNTU-CVE-2024-38357
TinyMCE is an open source rich text editor. A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. This vulnerability has bee...
CVE-2024-31217
Strapi is an open-source content management system. Prior to version 4.22.0, a denial-of-service vulnerability is present in the media upload process causing the server to crash without restarting, affecting either development and production environments. Usually, errors in the application cause ...
aparici.com Cross Site Scripting vulnerability OBB-3934349
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CGA-MFC3-CQ9Q-528V
Bulletin has no description...
GHSA-3CQF-953P-H5CP Argo-cd authenticated users can enumerate clusters by name
Impact It’s possible for authenticated users to enumerate clusters by name by inspecting error messages: $ curl -k 'https://localhost:8080/api/v1/clusters/in-cluster?id.type=name' -H "Authorization: Bearer $token" "error":"permission denied: clusters, get, , sub: alice, iat:...
Argo-cd authenticated users can enumerate clusters by name
Impact It’s possible for authenticated users to enumerate clusters by name by inspecting error messages: $ curl -k 'https://localhost:8080/api/v1/clusters/in-cluster?id.type=name' -H "Authorization: Bearer $token" "error":"permission denied: clusters, get, , sub: alice, iat:...
CGA-VFPC-G4P3-J9H4
Bulletin has no description...
CGA-V43R-MRV2-WJJ3
Bulletin has no description...
CGA-JVXV-V56M-JH46
Bulletin has no description...
CGA-H55M-GQGG-6877
Bulletin has no description...
CGA-R437-MPVW-QPHF
Bulletin has no description...
CGA-Q969-VF57-MFG2
Bulletin has no description...
CGA-J85H-RFQJ-G97X
Bulletin has no description...
CGA-C47P-H577-4GRJ
Bulletin has no description...
CGA-9V82-PC88-MFRW
Bulletin has no description...
CGA-9C4P-347J-PPPX
Bulletin has no description...
CGA-84XG-VFM8-VMC5
Bulletin has no description...
CGA-7942-4MRF-V638
Bulletin has no description...