1739 matches found
chromium -- multiple security fixes
Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...
Cross-site Scripting (XSS)
org.dspace:dspace-server-webapp is vulnerable to Cross-site Scripting XSS. The vulnerability is caused by improper validation of download behavior for HTML, XML, or JavaScript Bitstreams, allowing embedded JavaScript to execute in the user's browser, which could potentially lead to XSS attacks...
Malicious code in console-webapp (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2019 Malicious code in console-webapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload
Exploit Title: Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload Date: 2024-04-01 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import sys import os.path import requests import re import urllib3 from requests.exceptions import SSLError from...
PYSEC-2024-289
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...
PYSEC-2024-289
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...
PT-2024-15336
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo framework for Ubuntu affected versions not specified Description The NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr webapp where an attacker may cause an allocation of resources without limits or throttling....
Malicious code in u-workflow.module.common.webapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676ec2bf7328ac16d28e24c3bb40fca880b4161a25988951f815eb86c0598b95 The OpenSSF Package Analysis project identified 'u-workflow.module.common.webapp' @ 1.0.0 npm as malicious. It is considered malicious because: ...
BIT-MATTERMOST-2023-6458
Mattermost webapp fails to validate route parameters in//channels/ allowing an attacker to perform a client-side path traversal...
org.mitre:openid-connect-client (>=1.0.12, <=1.1.0), org.mitre:openid-connect-common (>=1.0.12, <=1.1.0) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.17.2)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - org.mitre:openid-connect-client =1.0.12, =1.0.12, =1.0.12, =1.0.12, =1.1.0 -...
activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2024-0727 via cryptography (3.1.0)
cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...
Pexip Infinity Security Vulnerability
Pexip Infinity is a cloud collaboration platform for video conferencing from Pexip Norway. The product provides high quality and secure cloud conferencing capabilities. A security vulnerability exists in Pexip Infinity prior to version 32, which stems from a cross-site scripting XSS vulnerability...
Mattermost Injection vulnerability
Mattermost webapp fails to validate route parameters in//channels/ allowing an attacker to perform a client-side path traversal...
GHSA-7664-HCP7-F497 Mattermost Injection vulnerability
Mattermost webapp fails to validate route parameters in//channels/ allowing an attacker to perform a client-side path traversal...
CVE-2023-6458
Mattermost webapp fails to validate route parameters in//channels/ allowing an attacker to perform a client-side path traversal...
Path traversal
Mattermost webapp fails to validate route parameters in//channels/ allowing an attacker to perform a client-side path traversal...
