Lucene search
+L
OsvMost viewed

1002623 matches found

OSV
OSV
added 2024/07/15 5:49 p.m.79 views

GHSA-5F5C-8RVC-J8WF OpaMiddleware does not filter HTTP OPTIONS requests

Summary HTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack authentication, and are passed through directly to the application. The maintainer uncertain whether this should be classed as a "bug" or "security issue" – but is erring on the side of "security issue" as an...

6.9CVSS5.5AI score0.00563EPSS
SaveExploits0References6
OSV
OSV
added 2024/07/08 2:14 p.m.79 views

GHSA-8QGM-G2VV-VWVC RailsAdmin Cross-site Scripting vulnerability in the list view

Impact RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. The issue was originally reported in https://github.com/railsadminteam/railsadmin/issues/3686. Patches Upgrade to 3.1.4. The vulnerability itself was patched in 3.1.3 but it has a functionali...

6.8CVSS5.1AI score0.00579EPSS
SaveExploits0References9
OSV
OSV
added 2024/06/08 7:26 a.m.79 views

BIT-MLFLOW-2024-37053

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.7AI score0.00618EPSS
SaveExploits1References2
OSV
OSV
added 2024/06/06 9:30 p.m.79 views

GHSA-MQ73-G4QR-FGCQ Clickjacking in zenml

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious...

4.3CVSS5AI score0.00357EPSS
SaveExploits1References5
OSV
OSV
added 2024/06/06 9:30 p.m.79 views

GHSA-5Q6C-FFVG-XCM9 Remote code execution in mlflow

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command 'Command Injection' within the mlflow.data.httpdatasetsource.py module. Specifically, when loading a dataset from a source URL with an HTTP...

10CVSS9AI score0.02401EPSS
SaveExploits1References5
OSV
OSV
added 2024/06/06 12:27 p.m.79 views

CGA-HCJ5-Q2XC-Q799

Bulletin has no description...

7.8CVSS5.6AI score0.00211EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:24 p.m.79 views

CGA-6F27-MJ52-CMC7

Bulletin has no description...

6.5CVSS6.3AI score0.00497EPSS
SaveExploits0
OSV
OSV
added 2024/05/14 10:33 a.m.79 views

BIT-PYTHON-2024-4030

On Windows a directory returned by tempfile.mkdtemp would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate configurations or users without a profile...

7.1CVSS7.1AI score0.00303EPSS
SaveExploits0References15
OSV
OSV
added 2024/05/09 9:7 p.m.79 views

GHSA-77R5-GW3J-2MPF Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References5
OSV
OSV
added 2024/05/05 3:30 a.m.79 views

GHSA-7HMM-WG23-2W7M Ryu Infinite Loop vulnerability

OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...

7.5CVSS7.3AI score0.00681EPSS
SaveExploits1References3
OSV
OSV
added 2024/04/10 6:30 p.m.79 views

GHSA-WVPX-G427-Q9WC llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution

A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method...

9.8CVSS9.7AI score0.00951EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/06 11:4 a.m.79 views

BIT-MATTERMOST-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS5.3AI score0.00835EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 10:58 a.m.79 views

BIT-MLFLOW-2023-30172

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter...

7.5CVSS7.4AI score0.01005EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 10:57 a.m.79 views

BIT-MLFLOW-2023-6018

An attacker can overwrite any file on the server hosting MLflow without any authentication...

10CVSS9.4AI score0.47594EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/06 10:57 a.m.79 views

BIT-APACHE-2020-1927

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL...

6.1CVSS7.1AI score0.56691EPSS
SaveExploits0References28
OSV
OSV
added 2024/03/06 10:53 a.m.79 views

BIT-HARBOR-2020-29662

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path...

5.3CVSS5.2AI score0.00722EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/05 11:23 p.m.79 views

GHSA-G3CM-QG2V-2HJ5 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

Summary Open redirect vulnerability due to incorrect validation of input values when redirecting users after login. Details pyload is validating URLs via the getredirecturl function when redirecting users at login. The URL entered in the next variable goes through the issafeurl function, where a...

6.1CVSS6.2AI score0.00545EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/31 6:15 p.m.79 views

PYSEC-2024-29

OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an adm...

4.9CVSS6.8AI score0.00519EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/25 9:32 p.m.79 views

GHSA-8J3X-W35R-RW4R Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability

A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed deserialized prior to the security constraints being evaluated and applied. This does not happen with configuration based security...

8.8CVSS8.9AI score0.00719EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/03 6:30 p.m.79 views

GHSA-GJHC-6XM7-MC8Q Duplicate Advisory: Cross-site scripting vulnerability in TinyMCE

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5h9g-x5rv-25wg. This link is maintained to preserve external references. Original Description TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and...

6AI score
SaveExploits0References5
OSV
OSV
added 2023/12/06 6:30 a.m.79 views

GHSA-5844-Q3FC-56RH pubnub Insufficient Entropy vulnerability

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0;...

5.9CVSS5.5AI score0.00955EPSS
SaveExploits1References22
OSV
OSV
added 2023/09/13 3:44 p.m.79 views

GHSA-4W8R-3XRW-V25G Craft CMS Remote Code Execution vulnerability

Impact This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. Mitigations This has been fixed in Craft 4.4.15. You should ensure you’re running at least that version. Refresh you...

10CVSS9.4AI score0.92555EPSS
SaveExploits10References9
OSV
OSV
added 2023/08/25 6:41 p.m.79 views

GHSA-256M-J5QW-38F4 Netmaker IDOR Allows User to Update Other User's Password

Impact An IDOR vulnerability was found in the user update function. By specifying another user's username it is possible to update the other user's password. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1"...

7.5CVSS7.4AI score0.00566EPSS
SaveExploits0References5
OSV
OSV
added 2023/06/21 6:35 p.m.79 views

GHSA-WMFF-GRCW-JCFM Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Impact The 1.4.0 release includes a regression on the filesystem scope check for dotfiles on Linux and macOS. Previously dotfiles eg. $HOME/.ssh/ were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a configuration option for this behavior was...

4.8CVSS7AI score0.00647EPSS
SaveExploits0References7
OSV
OSV
added 2023/05/26 1:57 p.m.79 views

GHSA-JV3F-7M33-QP65 Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited

Impact Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. Reported-By Thanks to the report from Mio Li [email protected] Patches commit 17e791afb90c9ad27c65f63c6be14f2f6a3a9d60 Author: Daniel Valdivia Date: Tue May 23 08:47:12 2023 -0700 Replace RIGHT-TO-LEFT...

4.3CVSS5AI score0.00648EPSS
SaveExploits0References5
OSV
OSV
added 2023/04/02 9:30 p.m.79 views

GHSA-436G-2F92-CVHH Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled

Permissions in Jenkins can be enabled and disabled. Some permissions are disabled by default, e.g., Overall/Manage or Item/Extended Read. Disabled permissions cannot be granted directly, only through greater permissions that imply them e.g., Overall/Administer or Item/Configure. Role-based...

5.9CVSS9.4AI score0.00828EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/30 8:18 p.m.79 views

GHSA-2WCR-87WF-CF9J Kiwi TCMS Stored Cross-site Scripting via SVG file

Impact Kiwi TCMS accepts SVG files uploaded by users which could potentially contain JavaScript code. If SVG images are viewed directly, i.e. not rendered in an HTML page, this JavaScript code could execute. Patches This vulnerability has been fixed by configuring Kiwi TCMS to serve with the...

7.6CVSS6.2AI score0.00485EPSS
SaveExploits0References4
OSV
OSV
added 2023/03/27 10:23 p.m.79 views

GHSA-838X-PCVX-6P5W Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer

Impact This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change generally improves performance and reduces workload on the garbage collector. Howeve...

7CVSS6.4AI score0.00553EPSS
SaveExploits0References6
OSV
OSV
added 2023/03/07 9:30 a.m.79 views

GHSA-FF27-HRMR-GGPJ Answer vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.5AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2023/02/16 9:56 p.m.79 views

GO-2023-1549 Improper input validation in github.com/openshift/apiserver-library-go

Low-privileged users can set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint SCC is "runtime/default," allowing users to disable seccomp for pods they can create and modify...

6.3CVSS6.3AI score0.00647EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/27 3:30 p.m.79 views

GHSA-J593-H5V3-45X6 usememos/memos may leak user information to an authenticated user

usememos/memos 0.9.0 and prior has endpoint that leaks user information like names, email, role, and OpenID to an authenticated user. A patch is available at commit 05b41804e33a34102f1f75bb2d69195dda6a1210 on the main branch...

4.3CVSS5.7AI score0.00773EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/05 5:37 p.m.79 views

GHSA-2R7V-CMCH-5X26 muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference

Impact The package muhammara before 2.6.2, from 3.0.0 and before 3.3.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed. Patches It has been patched in 3.4.0 and has been backported to 2.6.2 There is no patch fo...

7.5CVSS7.4AI score0.0103EPSS
SaveExploits0References5
OSV
OSV
added 2022/11/10 9:16 p.m.79 views

GHSA-WH6W-3828-G9QF Wasmtime may have data leakage between instances in the pooling allocator

Impact There is a bug in Wasmtime's implementation of it's pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously to the next instance. The pooling instance allocator in Wasmtime works by...

8.6CVSS8.3AI score0.00657EPSS
SaveExploits0References8
OSV
OSV
added 2022/10/30 12:0 a.m.79 views

DSA-5267-1 pysha3 - security update

Bulletin has no description...

9.8CVSS8.9AI score0.05414EPSS
SaveExploits1
OSV
OSV
added 2022/10/25 8:21 p.m.79 views

GHSA-F4MM-2R69-MG5F OpenFGA Authorization Bypass

Overview During our internal security assessment, it was discovered that OpenFGA versions v0.2.3 and prior are vulnerable to authorization bypass under certain conditions. Am I Affected? You are affected by this vulnerability if you are using openfga/openfga version v0.2.3 or prior, and your mode...

5.9CVSS7.5AI score0.00898EPSS
SaveExploits0References5
OSV
OSV
added 2022/07/28 12:0 a.m.79 views

GHSA-2QH6-HHVV-M2WW Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted

HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file jenkins.plugins.httprequest.HttpRequest.xml on the Jenkins controller as part of its configuration when using deprecated Basic/Digest Authentication. These passwords can be viewed by...

3.3CVSS6.6AI score0.00822EPSS
SaveExploits0References5
OSV
OSV
added 2022/07/12 12:0 p.m.79 views

RUSTSEC-2022-0084 libp2p Lack of resource management DoS

libp2p allows a potential attacker to cause victim p2p node to run out of memory The out of memory failure can cause crashes where libp2p is intended to be used within large scale networks leading to potential Denial of Service DoS vector Users should upgrade or reference the DoS mitigation...

7.5CVSS7.3AI score0.00689EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/25 10:55 p.m.79 views

GHSA-FM53-MPMP-7QW2 Possible cross-site scripting attack via unsanitized SVG files in FoF Upload

Impact If FoF Upload is configured to allow the uploading of SVG files image/svg+xml, navigating directly to an SVG file URI could execute arbitrary Javascript code decided by an attacker. This Javascript code could include the execution of HTTP web requests to Flarum, or any other web service...

8.7CVSS7.3AI score0.01183EPSS
SaveExploits1References6
OSV
OSV
added 2022/05/24 7:5 p.m.79 views

GHSA-G5M5-J48G-FR24 Moodle Cross Site Scripting (XSS)

Cross Site Scripting XSS in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field...

5.4CVSS5.7AI score0.00906EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/24 5:10 p.m.79 views

GHSA-6C7R-6P5M-CP82 Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability...

5.4CVSS6.4AI score0.00853EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/17 2:22 a.m.79 views

GHSA-23VV-V25H-QWQW Improper Input Validation in Apache Axis2

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server WAS 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly...

7.5CVSS8.3AI score0.22372EPSS
SaveExploits3References9
OSV
OSV
added 2022/05/13 1:47 a.m.79 views

GHSA-G283-88V5-RMQ2 SaltStack Salt allows compromised salt-minions to impersonate the salt-master

In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...

9.8CVSS9.4AI score0.01411EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/13 1:17 a.m.79 views

GHSA-J7MW-7CRR-658V Richfaces vulnerable to arbitrary code execution

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language EL injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData...

9.8CVSS9.7AI score0.74171EPSS
SaveExploits6References10
OSV
OSV
added 2022/01/28 11:6 p.m.79 views

GHSA-W4HP-PCP8-QHF3 Cross-site Scripting in livehelperchat

Stored XSS is found in SettingsLive help configurationDepartments-Departments groups-edit When a user creates a new webhook under the NAME field and puts a payload constructor.constructor'alert1', the input gets stored, at user edit groupname , the payload gets executed...

5.4CVSS5.1AI score0.00634EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/21 11:20 p.m.79 views

GHSA-X7WR-283H-5H2V Out-of-bounds Read in Onionshare

Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's Red Team lab. This is an issue from that penetration test. - Vulnerability ID: OTF-014 - Vulnerability type: Out-of-bounds Read - Threat...

8.7CVSS6.2AI score0.00787EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/06 7:45 p.m.79 views

GHSA-WC6F-CJCP-CC33 Improper Certificate Validation in Apache IoTDB

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

9.8CVSS9.6AI score0.02676EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/16 3:15 p.m.79 views

CVE-2021-40438

A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier...

9CVSS1.2AI score
SaveExploits0References20
OSV
OSV
added 2021/08/30 4:13 p.m.79 views

GHSA-CVH5-P6R6-G2QC Exposed phpinfo() leadked via documentation files

Impact The phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule .htaccess, etc. Patches Only the v6, v7 and v8 will be patched respectively in...

5.4CVSS4.8AI score0.06132EPSS
SaveExploits1References9
OSV
OSV
added 2021/08/25 8:58 p.m.79 views

GHSA-2F5J-3MHQ-XV58 Double free in sys-info

Affected versions of sys-info use a static, global, list to store temporary disk information while running. The function that cleans up this list, DFCleanup, assumes a single threaded environment and will try to free the same memory twice in a multithreaded environment. This results in consistent...

9.8CVSS9AI score0.0123EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/12 8:42 p.m.79 views

GHSA-GPFJ-4J6G-C4W9 Clipboard-based DOM-XSS

Impact A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown library. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its innerHTML property without any sanitization, resulting in improper execution of...

6.5CVSS6.2AI score0.0166EPSS
SaveExploits1References6
Total number of security vulnerabilities5000