Lucene search
+L
OsvMost viewed

2102211 matches found

OSV
OSV
added 2024/06/06 12:25 p.m.80 views

CGA-FW5X-X4P6-39WR

Bulletin has no description...

7.1CVSS6.9AI score0.00384EPSS
SaveExploits1
OSV
OSV
added 2024/06/05 1:29 p.m.80 views

GHSA-665W-MWRR-77Q3 Arbitrary file read via Playwright's screenshot feature exploiting file wrapper

Impact All users of url-to-png. Please see https://github.com/jasonraimondi/url-to-png/issues/47 Patches v2.0.3 requires input url to be of protocol http or https Workarounds Requires upgrade. References - https://github.com/jasonraimondi/url-to-png/issues/47 -...

5.3CVSS5.2AI score0.00529EPSS
SaveExploits0References7
OSV
OSV
added 2024/05/16 5:44 p.m.80 views

GHSA-FJW8-3GP8-4CVX Denial of service of Minder Server with attacker-controlled REST endpoint

The Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server. The REST ingester allows users to interact with REST endpoints to fetch data for rule evaluation. When fetching data with the REST ingester, Minder sends...

5.3CVSS5.1AI score0.00465EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/15 12:06 p.m.80 views

BIT-CILIUM-2023-41333 Bypass of namespace restrictions in CiliumNetworkPolicy

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in othe...

8.1CVSS7.1AI score0.00408EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/07 2:29 p.m.80 views

CVE-2024-34342 react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true which is the default value, unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in...

7.1CVSS6.6AI score
SaveExploits0References8
OSV
OSV
added 2024/05/06 1:04 p.m.80 views

RLSA-2024:1687 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS1 v1.5 padding Marvin CVE-2023-46809 nodejs: reading unprocessed HTT...

9.8CVSS7.4AI score0.03168EPSS
SaveExploits0References8
OSV
OSV
added 2024/04/16 12:30 a.m.80 views

GHSA-J62R-WXQQ-F3GF mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the createmodelversion function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the...

7.5CVSS7.3AI score0.00859EPSS
SaveExploits1References3
OSV
OSV
added 2024/04/12 7:21 a.m.80 views

BIT-MAGENTO-2024-20759

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a...

8.1CVSS7AI score0.01028EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/10 5:07 p.m.80 views

GHSA-V782-XR4W-3VQX XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted

Impact It is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it's possible for an attacker to have access to the hash password of a user if they have rights to edit the users' page. No...

6.8CVSS5.7AI score0.00376EPSS
SaveExploits0References7
OSV
OSV
added 2024/04/06 6:33 p.m.80 views

BIT-WORDPRESS-2024-31211 Remote Code Execution in `WP_HTML_Token`

WordPress is an open publishing platform for the Web. Unserialization of instances of the WPHTMLToken class allows for code execution via its destruct magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.0 are not affected...

9.8CVSS5.5AI score0.02763EPSS
SaveExploits1References2
OSV
OSV
added 2024/04/02 12:00 a.m.80 views

ALSA-2024:1607 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery CVE-2022-38096 kernel: Out of boundary write in perfreadgroup as result of overflow a perfevent's readsize CVE-2023-6931 kernel: GS...

7.8CVSS7.9AI score0.28058EPSS
SaveExploits18References16
OSV
OSV
added 2024/03/31 6:21 p.m.80 views

BIT-MASTODON-2024-25619 Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon

Mastodon is a free, open-source social network server based on ActivityPub. When an OAuth Application is destroyed, the streaming server wasn't being informed that the Access Tokens had also been destroyed, this could have posed security risks to users by allowing an application to continue...

4.3CVSS4.2AI score0.00363EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/29 8:16 p.m.80 views

GHSA-35W3-6QHC-474V @workos-inc/authkit-nextjs session replay vulnerability

Impact A user can reuse an expired session by controlling the x-workos-session header. Patches Patched in https://github.com/workos/authkit-nextjs/releases/tag/v0.4.2...

4.8CVSS5AI score0.00659EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/20 3:44 p.m.80 views

GHSA-X4X5-JV3X-9C7M `qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code

Summary deserializing json data using qiskitibmruntime.RuntimeDecoder can be made to execute arbitrary code given a correctly formatted input string Details RuntimeDecoder is supposed to be able to deserialize JSON strings containing various special types encoded via RuntimeEncoder. However, one...

5.3CVSS5.9AI score0.00372EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/18 5:35 p.m.80 views

GO-2024-2614 Password brute force attack in github.com/IceWhaleTech/CasaOS-UserService

The CasaOS web application does not have protection against password brute force attacks. An attacker can use a password brute force attack to find and gain full access to the server. This vulnerability allows attackers to get super user-level access over the server...

9.8CVSS9.5AI score0.00977EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/12 8:50 p.m.80 views

GHSA-FR3W-2P22-6W7P URL Redirection to Untrusted Site in OAuth2/OpenID in directus

Summary The authentication API has a redirect parameter that can be exploited as an open redirect vulnerability as the user tries to log in via the API URL https://docs.directus.io/reference/authentication.htmllogin-using-sso-providers /auth/login/google?redirect for example. Details There's a...

5.4CVSS5AI score0.00583EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/10 3:30 a.m.80 views

GHSA-X2VG-5WRF-VJ6V 1Panel is vulnerable to command injection

1Panel is vulnerable to command injection. This vulnerability has been classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the...

6.3CVSS8.1AI score0.03044EPSS
SaveExploits1References7
OSV
OSV
added 2024/03/06 6:30 p.m.80 views

GHSA-8H2M-54WH-GWJ3 Jenkins docker-build-step Plugin missing permission check

A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting futu...

6.3CVSS8.5AI score0.00826EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:15 a.m.80 views

BIT-TENSORFLOW-2022-21732 Memory exhaustion in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS5.2AI score0.00765EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/06 11:14 a.m.80 views

BIT-TENSORFLOW-2022-35940 Int overflow in `RaggedRangeOp` in Tensoflow

TensorFlow is an open source platform for machine learning. The RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it can overflow when converted to an int64. This triggers an InvalidArgument but also...

7.5CVSS6.6AI score0.00701EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:13 a.m.80 views

BIT-TENSORFLOW-2022-35973 Segfault in `QuantizedMatMul` in TensorFlow

TensorFlow is an open source platform for machine learning. If QuantizedMatMul is given nonscalar input for: mina, maxa, minb, or maxb It gives a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit aca766ac7693bf29ed0df55ad6bfcc78f35e7f48. T...

7.5CVSS6.4AI score0.0051EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:11 a.m.80 views

BIT-MOODLE-2020-25631

A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8...

6.1CVSS5.8AI score0.00934EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:07 a.m.80 views

BIT-JENKINS-2020-2099

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonati...

8.6CVSS8.2AI score0.01012EPSS
SaveExploits0References7
OSV
OSV
added 2024/03/06 11:05 a.m.80 views

BIT-RUBY-2021-33621

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object...

8.8CVSS8.8AI score0.0244EPSS
SaveExploits1References9
OSV
OSV
added 2024/03/06 11:04 a.m.80 views

BIT-PUBLIFY-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

6.5CVSS6.3AI score0.00828EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 11:03 a.m.80 views

BIT-PUBLIFY-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

6.5CVSS6.6AI score0.00898EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 11:02 a.m.80 views

BIT-PUBLIFY-2023-0569

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

8.1CVSS6.6AI score0.007EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:58 a.m.80 views

BIT-MOODLE-2023-46858

Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content are used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."...

5.4CVSS5.1AI score0.00617EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/06 10:58 a.m.80 views

BIT-NATS-2022-26652

NATS nats-server before 2.7.4 allows Directory Traversal with write access via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected...

6.5CVSS6.4AI score0.02342EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/06 10:57 a.m.80 views

BIT-MASTODON-2022-0432 Prototype Pollution in mastodon/mastodon

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0...

7.4CVSS6.2AI score0.04429EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 10:54 a.m.80 views

BIT-DISCOURSE-2023-38706 Discourse vulnerable to DoS via drafts

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the stable branch, a malicious user can create an unlimited number of drafts with very long draft keys which may end up exhausting the resources on the server. The issue is patched in version 3.1.1 of the stable branch...

6.5CVSS6.6AI score0.0077EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 10:53 a.m.80 views

BIT-DRUPAL-2022-25273

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...

7.5CVSS7.2AI score0.00568EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:53 a.m.80 views

BIT-GUACAMOLE-2023-30576

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...

8.1CVSS7.6AI score0.01113EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 10:52 a.m.80 views

BIT-DISCOURSE-2023-45806 Discourse vulnerable to DoS via Regexp Injection in Full Name

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, if a user has been quoted and uses a | in their full name, they might be able to trigger a bug that generates a lot of duplicat...

5.4CVSS4.9AI score0.00999EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/22 3:30 p.m.80 views

GHSA-PCM8-QQRP-W6QF Enhavo Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

6.1CVSS5.8AI score0.00443EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/13 8:32 p.m.80 views

GHSA-5W2H-59J3-8X5W TYPO3 Install Tool vulnerable to Code Execution

Problem Several settings in the Install Tool for configuring the path to system binaries were vulnerable to code execution. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. The corresponding change for this advisory involves...

8.6CVSS7.2AI score0.02017EPSS
SaveExploits0References9
OSV
OSV
added 2024/01/31 3:21 p.m.80 views

BIT-LIFERAY-2022-26593

Cross-site scripting XSS vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category...

5.4CVSS5.4AI score0.00585EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/19 9:30 p.m.80 views

GHSA-23RX-79R7-6CPX Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-883x-6fch-6wjx. This link is maintained to preserve external references. Original Description Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a speci...

8.2CVSS8AI score
SaveExploits0References8
OSV
OSV
added 2023/12/15 3:30 p.m.80 views

GHSA-QG44-XQWJ-WC28 Apache StreamPark: Authenticated system users could trigger remote command execution

In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on the compilation parameters of Maven. allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in...

7.2CVSS7.1AI score0.02299EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/13 1:24 p.m.80 views

GHSA-V98M-398X-269R DOM-XSS on Backoffice login screen.

Impact Cross-site scripting XSS enable attackers to bring malicious content into a website or application. Explanation of the vulnerability A DOM-XSS can be exploited when users are successfully logging into the Backoffice...

4.3CVSS5.1AI score0.00425EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/30 7:15 a.m.80 views

PYSEC-2023-250

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request e.g. to insert a new header or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the...

5.3CVSS5.1AI score0.00882EPSS
SaveExploits1References4
OSV
OSV
added 2023/11/27 5:25 p.m.80 views

GHSA-R68H-JHHJ-9JVM Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year

Impact The Validator.isValidSafeHTML method can result in false negatives where it reports some input as safe i.e., returns true, but really isn't, and using that same input as-is can in certain circumstances result in XSS vulnerabilities. Because this method cannot be fixed, it is being deprecat...

6.4AI score
SaveExploits0References2
OSV
OSV
added 2023/11/22 8:55 p.m.80 views

GHSA-CF9F-WMHP-V4PR Cross-site Scripting potential in custom links, job buttons, and computed fields

Impact All users of Nautobot versions earlier than 1.6.6 or 2.0.5 are potentially affected. Due to incorrect usage of Django's marksafe API when rendering certain types of user-authored content, including: - custom links - job buttons - computed fields it is possible that users with permission to...

7.1CVSS5.9AI score0.00543EPSS
SaveExploits0References10
OSV
OSV
added 2023/11/16 8:13 p.m.80 views

GHSA-XVMV-4RX6-X6JX Authenticated users can view job names and groups they do not have authorization to view

Access to two URLs used in both Rundeck Open Source and Process Automation products could allow authenticated users to access the URL path, which provides a list of job names and groups for any project, without the necessary authorization checks. The affected URLs are: - https://host/context/rdJo...

4.3CVSS4.3AI score0.00508EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/02 8:53 p.m.80 views

GHSA-JHWW-FX2J-3RF7 FoodCoopShop Server-Side Request Forgery vulnerability

There is a potential SSRF vulnerability in foodcoopshop. Since there is no security policy on your Github, I tried to use the emails to contact you. The potential issue is in the Network module, where a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a...

8.1CVSS7.6AI score0.00452EPSS
SaveExploits0References6
OSV
OSV
added 2023/09/06 8:51 p.m.80 views

GHSA-HQ8W-9W8W-PMX7 WireMock Controlled Server Side Request Forgery vulnerability through URL

Impact WireMock can be configured to only permit proxying and therefore recording to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. Documentation. Until WireMock Webhooks Extension 3.0.0-beta-1...

4.6CVSS5.8AI score0.00498EPSS
SaveExploits0References7
OSV
OSV
added 2023/09/04 5:02 p.m.80 views

GHSA-XC27-F9Q3-4448 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

Summary hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched files should be contained within the project root directory, but that is n...

3.3CVSS5.4AI score0.00365EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/20 2:54 p.m.80 views

GHSA-HHR9-RH25-HVF9 Feathers socket handler allows abusing implicit toString

Impact Feathers socket handler did not catch invalid string conversion errors like: ts const message = $ toString: '' Causing the NodeJS process to crash when sending an unexpected Socket.io message like ts socket.emit'find', toString: '' Patches A fix has been released in - v5.0.8 via 3241 -...

7.5CVSS7.5AI score0.01188EPSS
SaveExploits1References9
OSV
OSV
added 2023/07/14 9:52 p.m.80 views

GHSA-6HVV-J432-23CV Weave GitOps Terraform Controller Information Disclosure Vulnerability

Impact A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This vulnerability stems from Weave GitOps Terraform Runners tf-runner, where sensitive data is inadvertently printed - potentially...

8.5CVSS7.3AI score0.00961EPSS
SaveExploits1References9
OSV
OSV
added 2023/06/29 9:30 p.m.80 views

GHSA-VV6Q-6HWP-VRGP easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References4
Total number of security vulnerabilities5000