1949 matches found
CVE-2024-55634 Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004
A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...
BELL-CVE-2024-47835
Bulletin has no description...
BELL-CVE-2024-47615
Bulletin has no description...
BELL-CVE-2024-11407
Bulletin has no description...
BELL-CVE-2023-52922
Bulletin has no description...
BELL-CVE-2024-53100
Bulletin has no description...
virtualenv allows command injection through activation scripts for a virtual environment
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...
CVE-2024-52287 authentik performs insufficient validation of OAuth scopes
authentik is an open-source identity provider. When using the clientcredentials or devicecode OAuth grants, it was possible for an attacker to get a token from authentik with scopes that haven't been configured in authentik. authentik 2024.8.5 and 2024.10.3 fix this issue...
BELL-CVE-2024-53076
Bulletin has no description...
BELL-CVE-2024-53056
Bulletin has no description...
BELL-CVE-2024-53050
Bulletin has no description...
BELL-CVE-2024-50290
Bulletin has no description...
BELL-CVE-2024-50269
Bulletin has no description...
BELL-CVE-2024-50265
Bulletin has no description...
CVE-2024-52303 vulnerabilities
Vulnerabilities for packages: checkov, py3-aiohttp, airflow...
CVE-2024-47873 PhpSpreadsheet XmlScanner bypass leads to XXE
PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. However, prior to versions 1.9.4, 2.1.3, 2.3.2, and 3.4.0, the regexes used in the scan method and the findCharSet method can be bypassed by using...
CVE-2024-45505 Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...
BELL-CVE-2024-50261
Bulletin has no description...