Lucene search
+L
OsvMost viewed

1002773 matches found

OSV
OSV
•added 2024/03/06 11:3 a.m.•71 views

BIT-PHP-2022-31630 OOB read due to insufficient input validation in imageloadfont()

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar function, the read outside allocated buffer will be used. This can lead to crashes or...

7.1CVSS8AI score0.02179EPSS
SaveExploits3References2
OSV
OSV
•added 2024/03/06 11:3 a.m.•71 views

BIT-MOODLE-2022-40208

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt...

4.3CVSS4.7AI score0.00563EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 11:0 a.m.•71 views

BIT-DISCOURSE-2023-23615 Malicious users in Discourse can create spam topics as any user due to improper access control

Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments ...

5.3CVSS5.4AI score0.00452EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 10:58 a.m.•71 views

BIT-MYBB-2022-39265

MyBB is a free and open source forum software. The Mail Settings → Additional Parameters for PHP's mail function mailparameters setting value, in connection with the configured mail program's options and behavior, may allow access to sensitive information and Remote Code Execution RCE. The...

7.2CVSS7.1AI score0.02332EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/06 10:56 a.m.•71 views

BIT-MONGOOSE-2023-3696 Prototype Pollution in automattic/mongoose

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4...

10CVSS9.4AI score0.01208EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 10:50 a.m.•71 views

BIT-CONSUL-2023-5332 Dependency on Vulnerable Third-Party Component in GitLab

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE...

8.1CVSS7.7AI score0.00742EPSS
SaveExploits1References3
OSV
OSV
•added 2024/02/07 3:30 p.m.•71 views

GHSA-9VGQ-W5PV-V77Q Liferay Portal stored cross-site scripting (XSS) vulnerability

Stored cross-site scripting XSS vulnerability in the Portal Search module's Search Result app in Liferay Portal 7.2.0 through 7.4.3.11, and older unsupported versions, and Liferay DXP 7.4 before update 8, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote...

9.6CVSS6.2AI score0.00563EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/01 8:51 p.m.•71 views

GHSA-9X7F-GWXQ-6F2C Vyper's bounds check on built-in `slice()` function can be overflowed

Summary The bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start or length variable, this creates the ability for an attacker to overflow the bounds check. This issue...

9.8CVSS9.7AI score0.00902EPSS
SaveExploits1References6
OSV
OSV
•added 2024/01/19 9:30 p.m.•71 views

GHSA-HFJ8-63C8-RMFW Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0References5
OSV
OSV
•added 2023/12/13 1:24 p.m.•71 views

GHSA-V98M-398X-269R DOM-XSS on Backoffice login screen.

Impact Cross-site scripting XSS enable attackers to bring malicious content into a website or application. Explanation of the vulnerability A DOM-XSS can be exploited when users are successfully logging into the Backoffice...

4.3CVSS5.1AI score0.00425EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/06 6:31 p.m.•71 views

GHSA-XFV5-JQGP-VQHJ Quarkus Cache Runtime exposes sensitive information to an unauthorized actor

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

5.3CVSS5.9AI score0.00631EPSS
SaveExploits0References8
OSV
OSV
•added 2023/11/28 11:28 p.m.•71 views

GHSA-4GRX-2X9W-596C Marvin Attack: potential key recovery through timing sidechannels

The Marvin Attack is a timing sidechannel vulnerability which allows performing RSA decryption and signing operations as an attacker with the ability to observe only the time of the decryption operation performed withthe private key. A recent survey of RSA implementations found that the Rust rsa...

5.9CVSS5.4AI score0.0061EPSS
SaveExploits0References5
OSV
OSV
•added 2023/11/27 11:29 p.m.•71 views

GHSA-X2XM-P6VQ-482G OroCalendarBundle has incorrect system calendar events visibility

OroPlatform is a package that assist system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks...

5CVSS4.6AI score0.00538EPSS
SaveExploits0References5
OSV
OSV
•added 2023/11/22 8:55 p.m.•71 views

GHSA-CF9F-WMHP-V4PR Cross-site Scripting potential in custom links, job buttons, and computed fields

Impact All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected. Due to incorrect usage of Django's marksafe API when rendering certain types of user-authored content, including: - custom links - job buttons - computed fields it is possible that users with permission to...

7.1CVSS5.9AI score0.00543EPSS
SaveExploits0References10
OSV
OSV
•added 2023/11/14 12:0 a.m.•71 views

ALSA-2023:7077 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 kernel: net/sched: multiple vulnerabilities CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208...

8.8CVSS9AI score0.03022EPSS
SaveExploits8References105
OSV
OSV
•added 2023/11/01 2:35 p.m.•71 views

GHSA-JFXW-6C5V-C42F Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Proof of Concept Step 1. Go to /admin and login. Step 2. In Documents, go to home - click on Sample Conten...

6.1CVSS6.1AI score0.00496EPSS
SaveExploits0References5
OSV
OSV
•added 2023/10/31 3:31 a.m.•71 views

GHSA-34W4-WRQP-J47G Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...

6.3CVSS5.6AI score0.00287EPSS
SaveExploits1References4
OSV
OSV
•added 2023/10/25 9:15 p.m.•71 views

GHSA-XWCQ-PM8M-C4VF crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

Impact Summary Crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standardOWASP PBKDF2 Cheatsheet. This is because it both 1 defaults to SHA1SHA1 wiki, a cryptographic hash algorithm considered insecure since at leas...

9.1CVSS9.2AI score0.00635EPSS
SaveExploits0References5
OSV
OSV
•added 2023/10/16 2:20 p.m.•71 views

GHSA-HV79-P62R-WG3P Cachet vulnerable to Authenticated Remote Code Execution

Summary A template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Within /cachet/app/Http/Routes/ApiRoutes.php, and attacker could control template input which is passed to laravel's dispatched...

9.1CVSS9AI score0.46904EPSS
SaveExploits1References4
OSV
OSV
•added 2023/10/06 5:0 a.m.•71 views

RSEC-2023-6 Denial of Service (DoS) vulnerability

The commonmark package, specifically in its dependency on GitHub Flavored Markdown before version 0.29.0.gfm.1, has a vulnerability related to time complexity. Parsing certain crafted markdown tables can take On n time, leading to potential Denial of Service attacks. This issue does not affect th...

6.5CVSS6.2AI score0.01566EPSS
SaveExploits0References3
OSV
OSV
•added 2023/09/30 3:31 a.m.•71 views

GHSA-QCJG-HVG6-HXCP phpMyFAQ allows unrestricted file types in image field

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

6.5CVSS7.8AI score0.0052EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/19 12:0 p.m.•71 views

RUSTSEC-2023-0082 phonenumber: panic on parsing crafted RF3966 phonenumber inputs

Impact The phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a maliciously crafted phonenumber over the network, specifically the string .;phone-context=. Patches...

8.6CVSS7.9AI score0.00694EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/12 12:0 a.m.•71 views

ALSA-2023:5091 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch requests CVE-2023-3390 kernel:...

7.8CVSS7.7AI score0.05188EPSS
SaveExploits5References22
OSV
OSV
•added 2023/07/25 5:19 p.m.•71 views

GHSA-4GPR-P634-922X Cross site scripting via input unit widget

Impact Authenticated users can inject malicious code in widgets with units, which is then executed both in the element preview back end and on the website front end. Patches Update to Contao 4.9.42, 4.13.28 or 5.1.10. Workarounds Disable login for all untrusted back end users. References...

6.6CVSS5.9AI score0.00637EPSS
SaveExploits1References7
OSV
OSV
•added 2023/07/12 6:30 p.m.•71 views

GHSA-P756-66W2-35G7 Jenkins Assembla Auth Plugin vulnerable to cross-site request forgery

Jenkins Assembla Auth Plugin 1.14 and earlier does not implement a state parameter in its OAuth flow, a unique and non-guessable value associated with each authentication request. This vulnerability allows attackers to trick users into logging in to the attacker’s account...

8.8CVSS8.7AI score0.0048EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/09 10:52 p.m.•71 views

GHSA-C6F8-8R25-C4GC Gatsby develop server has Local File Inclusion vulnerability

Impact The Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. The following steps can be used to reproduce the vulnerability: Create ...

4.3CVSS4.8AI score0.0091EPSS
SaveExploits1References5
OSV
OSV
•added 2023/05/24 9:30 a.m.•71 views

GHSA-H6JH-CF83-QCQ5 Code injection in nilsteampassnet/teampass

nilsteampassnet/teampass prior to 3.0.9 is vulnerable to code injection. A malicious user could potentially rename a folder with a payload containing malicious code. This could result in an attack on an admin who edits the folder, as the payload could execute upon the admin's interaction with the...

7.1CVSS8AI score0.01649EPSS
SaveExploits1References4
OSV
OSV
•added 2023/05/19 6:30 p.m.•71 views

GHSA-36CM-H8GV-MG97 RosarioSIS Stores Sensitive Data in a Mechanism without Access Control

RosarioSIS prior to 11.0 allows anyone, regardless of authentication status, to download and view file attachments under the salaries module. In addition, the file names contain a date in a YYYY-MM-DD format and a random six-string digit, making enumerating file names with automated tools...

7.5CVSS7.6AI score0.00613EPSS
SaveExploits0References4
OSV
OSV
•added 2023/04/12 8:38 p.m.•71 views

GHSA-CMVG-W72J-7PHX org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins

Impact There was no check in the author of a JavaScript xobject or StyleSheet xobject added in a XWiki document, so until now it was possible for a user having only Edit Right to create such object and to craft a script allowing to perform some operations when executing by a user with appropriate...

9CVSS7.2AI score0.00942EPSS
SaveExploits1References7
OSV
OSV
•added 2023/04/03 7:18 p.m.•71 views

GHSA-33PV-VCGH-JFG9 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files

Impact A memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing. A user with access to upload images or documents through the Wagtail admin interface could upload a fi...

5.9CVSS5AI score0.0107EPSS
SaveExploits0References11
OSV
OSV
•added 2023/03/20 12:0 a.m.•71 views

DSA-5376-1 apache2 - security update

Bulletin has no description...

9.8CVSS7.8AI score0.84508EPSS
SaveExploits5
OSV
OSV
•added 2023/03/15 10:15 p.m.•71 views

UBUNTU-CVE-2023-27601

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

7.5CVSS5.7AI score0.0099EPSS
SaveExploits0References6
OSV
OSV
•added 2023/03/06 6:30 p.m.•71 views

GHSA-HFXP-J95J-CWRP uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

4.8CVSS4.5AI score0.00398EPSS
SaveExploits1References4
OSV
OSV
•added 2023/02/23 3:33 p.m.•71 views

GHSA-9XPJ-MVP2-3943 OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability

Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug...

6.5CVSS6.3AI score0.00633EPSS
SaveExploits0References5
OSV
OSV
•added 2023/02/18 12:0 a.m.•71 views

DSA-5354-1 snort - security update

Bulletin has no description...

8.6CVSS5.8AI score0.02367EPSS
SaveExploits0
OSV
OSV
•added 2023/02/07 9:30 p.m.•71 views

GHSA-26F8-X7CC-WQPC Apache Kafka Connect vulnerable to Deserialization of Untrusted Data

A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, which has been possible on Kafka...

8.8CVSS8.7AI score0.9581EPSS
SaveExploits8References6
OSV
OSV
•added 2023/01/27 12:30 a.m.•71 views

GHSA-C467-5C2G-JP86 Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

7.1CVSS5.4AI score0.00618EPSS
SaveExploits1References5
OSV
OSV
•added 2023/01/25 7:39 p.m.•71 views

GHSA-6P4M-HW2H-6GMW Controller reconciles apps outside configured namespaces when sharding is enabled

Impact All Argo CD versions starting with 2.5.0-rc1 are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applications outside the configured allowed namespaces. Description of exploit Reconciled Application namespaces are specified as a comma-delimited lis...

8.5CVSS8.1AI score0.0078EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/28 6:30 p.m.•71 views

GHSA-M7QP-CJ9P-GJ85 OpenShift OSIN vulnerable to Observable Timing Discrepancy

A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. I...

5.9CVSS6AI score0.00676EPSS
SaveExploits0References7
OSV
OSV
•added 2022/12/28 12:30 a.m.•71 views

GHSA-HRM3-3XM6-X33H golang-nanoauth authentication bypass vulnerability

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token...

9.1CVSS9.2AI score0.00811EPSS
SaveExploits0References5
OSV
OSV
•added 2022/12/12 6:30 p.m.•71 views

GHSA-G594-55MP-F6Q8 Improper Privilege Management in rdiffweb

Unauthorized access to settings update, logs , history, delete etc in GitHub repository ikus060/rdiffweb prior to 2.5.2...

9.8CVSS7.5AI score0.00796EPSS
SaveExploits1References6
OSV
OSV
•added 2022/12/05 12:0 a.m.•71 views

DLA-3222-1 node-fetch - security update

Bulletin has no description...

8.8CVSS7.9AI score0.01646EPSS
SaveExploits1
OSV
OSV
•added 2022/11/15 7:5 p.m.•71 views

GHSA-PRJQ-F4Q3-FVFR github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference

Impact In versions prior to v0.7.0 it was possible for an attacker to supply an invalid assertion which would trigger a panic due to a nil-pointer dereference. Patches The issue was patched in v0.7.0, released on March 2, 2022. Workarounds Callers to gosaml2 can use recover to handle panics to...

7.5CVSS7.2AI score0.01769EPSS
SaveExploits1References8
OSV
OSV
•added 2022/09/28 12:0 a.m.•71 views

GHSA-4PHG-HPQM-C3J4 Strapi mishandles hidden attributes within admin API responses

Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses...

8.8CVSS8.7AI score0.01371EPSS
SaveExploits2References7
OSV
OSV
•added 2022/09/21 12:0 a.m.•71 views

GHSA-2QF8-H7PR-X2R8 YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module

YetiForce CRM versions 6.4.0 and prior are vulnerable to cross-site scripting via the WidgetsManagement module. A patch is available at commit b716ecea340783b842498425faa029800bd30420...

5.4CVSS5.2AI score0.0065EPSS
SaveExploits1References4
OSV
OSV
•added 2022/08/18 7:15 p.m.•71 views

GHSA-J3RV-W43Q-F9X2 React Editable Json Tree vulnerable to arbitrary code execution via function parsing

Impact Our library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function was used to execute strings that begin with "function" as Javascript. This was an oversight that unfortunately allows arbitrary code to be...

10CVSS9.3AI score0.01421EPSS
SaveExploits1References4
OSV
OSV
•added 2022/06/25 7:19 a.m.•71 views

GHSA-8F4F-V9X5-CG6J CloudCore UDS Server: Malicious Message can crash CloudCore

Impact A malicious message can crash CloudCore by triggering a null-pointer dereference in the UDS Server. Since the UDS Server only communicates with the CSI Driver on the cloud side, the attack is limited to the local host network. As such, an attacker would already need to be an authenticated...

4.2CVSS4.7AI score0.00614EPSS
SaveExploits1References4
OSV
OSV
•added 2022/06/24 12:0 a.m.•71 views

GHSA-5WW9-9QP2-X524 Improper handling of double quotes in file name in Diffy in Windows environment

The function that calls the diff tool in versions of Diffy prior to 3.4.1 does not properly handle double quotes in a filename when run in a Windows environment. This allows attackers to execute arbitrary commands via a crafted string...

9.8CVSS9.5AI score0.01742EPSS
SaveExploits0References5
OSV
OSV
•added 2022/05/24 7:10 p.m.•71 views

GHSA-JF7X-57G8-9HM5 Jeecg-Boot CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

9.8CVSS9.8AI score0.02343EPSS
SaveExploits1References3
OSV
OSV
•added 2022/05/24 5:5 p.m.•71 views

GHSA-CF8F-W2C5-P5JR keycloak vulnerable to unauthorized login via mail server setup

A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'...

9.1CVSS9.1AI score0.01718EPSS
SaveExploits1References5
Total number of security vulnerabilities5000