1949 matches found
Cross Site Scripting (XSS)
silverstripe/framework is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper validation allowing users to specify a non-URL malicious script as the redirection path, which executes within the browser when the URL is followed...
BELL-CVE-2024-38616
Bulletin has no description...
BELL-CVE-2024-38601
Bulletin has no description...
BELL-CVE-2024-36965
Bulletin has no description...
CVE-2024-36761
naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs...
Azure Storage Movement Client Library Denial of Service Vulnerability
Azure Storage Movement Client Library Denial of Service Vulnerability...
CVE-2024-36702
libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoderencodeLength function at /asn1/berencoder.c...
FileOrganizer < 1.0.8 - Sensitive Information Exposure via Directory Listing
Description The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizerajaxhandler' function. This makes it possible for unauthenticated attackers to extract sensitiv...
CVE-2024-4889 Code Injection in berriai/litellm
A code injection vulnerability exists in the berriai/litellm application, version 1.34.6, due to the use of unvalidated input in the eval function within the secret management system. This vulnerability requires a valid Google KMS configuration file to be exploitable. Specifically, by setting the...
CGA-JWFH-48F4-3PPX
Bulletin has no description...
CGA-FVX3-XX84-CV2V
Bulletin has no description...
BELL-CVE-2024-36925
Bulletin has no description...
BELL-CVE-2024-36923
Bulletin has no description...
BELL-CVE-2024-36950
Bulletin has no description...
BELL-CVE-2024-36924
Bulletin has no description...
BELL-CVE-2024-36919
Bulletin has no description...
BELL-CVE-2024-36902
Bulletin has no description...
BELL-CVE-2024-36895
Bulletin has no description...