BELL-CVE-2024-35987

Bulletin has no description...

BELL-CVE-2024-35823

Bulletin has no description...

BELL-CVE-2024-27436

Bulletin has no description...

BELL-CVE-2024-21823

Bulletin has no description...

BELL-CVE-2024-27397

Bulletin has no description...

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

BELL-CVE-2024-27051

Bulletin has no description...

BELL-CVE-2023-52647

Bulletin has no description...

BELL-CVE-2024-26865

Bulletin has no description...

BELL-CVE-2024-26870

Bulletin has no description...

CVE-2024-3098 Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index

A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method...

CVE-2023-52070

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedleint index, int type' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...

BELL-CVE-2023-52594

Bulletin has no description...

BELL-CVE-2023-52503

Bulletin has no description...

BELL-CVE-2023-52474

Bulletin has no description...

CVE-2024-20965

...

BELL-CVE-2023-5981

Bulletin has no description...

BELL-CVE-2023-25585

Bulletin has no description...

PT-2023-18953 · Sick · Sick Flexi Classic +1

Name of the Vulnerable Software and Affected Versions: SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 Description: The issue allows an...

Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. PoC themifyportfolioposts imageh='100"...