1949 matches found
CVE-2024-1019 WAF bypass of the ModSecurity v3 release line
ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present in request URLs before it separates the URL path component from the optional query string...
BELL-CVE-2024-21885
Bulletin has no description...
BELL-CVE-2023-45231
Bulletin has no description...
CVE-2024-20965
...
CVE-2024-20948
...
CVE-2024-20942
...
CVE-2024-20934
...
CVE-2024-20924
...
BELL-CVE-2024-20672
Bulletin has no description...
BELL-CVE-2022-36764
Bulletin has no description...
PT-2024-14015
Name of the Vulnerable Software and Affected Versions savignano S/Notify versions prior to 4.0.2 for Confluence Description An issue was discovered that allows the configuration settings of S/Notify to be modified via a CSRF attack while an administrative user is logged on. This could be initiate...
BELL-CVE-2023-50472
Bulletin has no description...
BELL-CVE-2023-6606
Bulletin has no description...
Privilege Escalation
ffmpeg is vulnerable to Privilege Escalation...
CVE-2023-48023
Anyscale Ray 2.6.3 and 2.8.0 allows /logproxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...
BELL-CVE-2023-42365
Bulletin has no description...
BELL-CVE-2023-5981
Bulletin has no description...
PT-2023-27011 · Unknown · Clusterpro X +3
Name of the Vulnerable Software and Affected Versions: CLUSTERPRO X versions 5.1 and earlier EXPRESSCLUSTER X versions 5.1 and earlier CLUSTERPRO X SingleServerSafe versions 5.1 and earlier EXPRESSCLUSTER X SingleServerSafe versions 5.1 and earlier Description: The issue allows an attacker to log...