Lucene search
+L
OsvMost viewed

2104370 matches found

OSV
OSV
•added 2025/03/06 6:30 a.m.•80 views

GHSA-W4RH-FGX7-Q63M ray vulnerable to Insertion of Sensitive Information into Log File

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

6.4CVSS7.2AI score0.00192EPSS
SaveExploits0References7
OSV
OSV
•added 2025/02/26 7:01 a.m.•80 views

DEBIAN-CVE-2022-49369

In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amtrcv If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur...

5.5CVSS5.5AI score0.00258EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/16 10:18 p.m.•80 views

GHSA-6PFC-W86R-54Q6 Welcome and About GeoServer pages communicate version and revision information

Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...

5.3CVSS5.4AI score0.00697EPSS
SaveExploits1References6
OSV
OSV
•added 2024/11/15 12:31 p.m.•80 views

GHSA-HHVR-2Q69-4563 Cross site scripting in sylius/sylius

sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting XSS through SVG files. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user's browser...

4.1CVSS4.5AI score0.00246EPSS
SaveExploits0References4
OSV
OSV
•added 2024/10/18 5:39 a.m.•80 views

CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

3.1CVSS6.7AI score
SaveExploits0References4
OSV
OSV
•added 2024/10/02 7:29 p.m.•80 views

GHSA-4XQV-47RM-37MM OpenC3 stores passwords in clear text (`GHSL-2024-129`)

Summary OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting see GHSL-2024-128. Note: This CVE only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition Impa...

5.9CVSS6.3AI score0.00353EPSS
SaveExploits1References6
OSV
OSV
•added 2024/10/01 10:27 p.m.•80 views

GHSA-X8GM-J36P-FPPF LibreNMS vulnerable to Stored Cross-site Scripting via File Upload

Summary Stored Cross-Site Scripting XSS can archive via Uploading a new Background for a Custom Map. Details Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload which will trigger onload. This led to Stored Cross-Site Scripti...

4.8CVSS4.9AI score0.00411EPSS
SaveExploits1References4
OSV
OSV
•added 2024/08/21 4:03 p.m.•80 views

GO-2022-0986 Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker

Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker...

8.8CVSS8.6AI score0.00864EPSS
SaveExploits0References3
OSV
OSV
•added 2024/08/14 8:49 p.m.•80 views

GHSA-F67Q-WR6W-23JQ Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...

7.5CVSS8.7AI score0.00679EPSS
SaveExploits0References6
OSV
OSV
•added 2024/08/06 9:30 p.m.•80 views

GHSA-P3PF-MFF8-3H47 Gorush uses deprecated TLS versions

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

6.9CVSS9.2AI score0.00308EPSS
SaveExploits0References5
OSV
OSV
•added 2024/08/05 9:29 p.m.•80 views

GHSA-FCCX-2PWJ-HRQ7 Flowise Cross-site Scripting in /api/v1/public-chatflows/id

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a reflected cross-site scripting vulnerability occurs in the /api/v1/public-chatflows/id endpoint. If the default configuration is used unauthenticated, an attacker may be able to...

6.1CVSS6.2AI score0.00405EPSS
SaveExploits1References4
OSV
OSV
•added 2024/08/01 3:32 p.m.•80 views

GHSA-JR9X-3X7M-4J75 Mattermost allows a remote actor to make an arbitrary local channel read-only

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5 and 9.8.x = 9.8.1 fail to disallow the modification of local channels by a remote, when shared channels are enabled, which allows a malicious remote to make an arbitrary local channel read-only...

5.1CVSS4.5AI score0.00276EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/01 1:52 a.m.•80 views

CGA-6427-PQ22-FHV9

Bulletin has no description...

9.8CVSS9.4AI score0.01812EPSS
SaveExploits0
OSV
OSV
•added 2024/07/23 2:10 p.m.•80 views

GHSA-8H55-Q5QQ-P685 (ReDoS) Regular Expression Denial of Service in tf2-item-format

Summary Versions of tf2-item-format since at least 4.2.6 are vulnerable to a Regular Expression Denial of Service ReDoS attack when parsing crafted user input. Tested Versions - 5.9.13 - 5.8.10 - 5.7.0 - 5.6.17 - 4.3.5 - 4.2.6 v5 Upgrade package to ^5.9.14 v4 No patch exists. Please consult the v...

8.7CVSS7.4AI score0.00766EPSS
SaveExploits0References5
OSV
OSV
•added 2024/07/08 3:25 p.m.•80 views

GHSA-8P72-RCQ4-H6PW Directus Blind SSRF On File Import

Summary There was already a reported SSRF vulnerability via file import. https://github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h It was fixed by resolving all DNS names and checking if the requested IP is an internal IP address. However it is possible to bypass this security...

5.3CVSS5.5AI score0.00435EPSS
SaveExploits1References4
OSV
OSV
•added 2024/06/22 6:30 a.m.•80 views

GHSA-PQHQ-77PW-763C Cross site scripting in opencart

This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the directory parameter of admin common/filemanager.list route. An attacker could obtain a user's token by tricking the user to click on a maliciously crafted URL. The user is then prompte...

4.2CVSS4.8AI score0.00366EPSS
SaveExploits1References4
OSV
OSV
•added 2024/06/12 7:39 p.m.•80 views

GHSA-WRVH-RCMR-9QFC @strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass

Summary By combining two vulnerabilities an Open Redirect and session token sent as URL query parameter in Strapi framework is its possible of an unauthenticated attacker to bypass authentication mechanisms and retrieve the 3rd party tokens. The attack requires user interaction one click. Impact...

7.1CVSS8AI score0.00704EPSS
SaveExploits1References4
OSV
OSV
•added 2024/06/07 7:37 p.m.•80 views

GHSA-5PXR-7M4J-JJC6 Cross-site scripting (XSS) vulnerability in Description metadata

Summary Regardless of the role or privileges, no user should be able to inject malicious JavaScript JS scripts into the body HTML. an XSS Cross-Site Scripting vulnerability, specifically a Stored XSS, which affects all pages of the website. Once the JS script is embedded in the body HTML, the XSS...

4.8CVSS5.7AI score0.00463EPSS
SaveExploits1References5
OSV
OSV
•added 2024/06/06 12:25 p.m.•80 views

CGA-FW5X-X4P6-39WR

Bulletin has no description...

7.1CVSS6.9AI score0.00384EPSS
SaveExploits1
OSV
OSV
•added 2024/06/05 1:29 p.m.•80 views

GHSA-665W-MWRR-77Q3 Arbitrary file read via Playwright's screenshot feature exploiting file wrapper

Impact All users of url-to-png. Please see https://github.com/jasonraimondi/url-to-png/issues/47 Patches v2.0.3 requires input url to be of protocol http or https Workarounds Requires upgrade. References - https://github.com/jasonraimondi/url-to-png/issues/47 -...

5.3CVSS5.2AI score0.00529EPSS
SaveExploits0References7
OSV
OSV
•added 2024/05/16 5:44 p.m.•80 views

GHSA-FJW8-3GP8-4CVX Denial of service of Minder Server with attacker-controlled REST endpoint

The Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server. The REST ingester allows users to interact with REST endpoints to fetch data for rule evaluation. When fetching data with the REST ingester, Minder sends...

5.3CVSS5.1AI score0.00465EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/15 12:06 p.m.•80 views

BIT-CILIUM-2023-41333 Bypass of namespace restrictions in CiliumNetworkPolicy

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in othe...

8.1CVSS7.1AI score0.00408EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/07 2:29 p.m.•80 views

CVE-2024-34342 react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true which is the default value, unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in...

7.1CVSS6.6AI score
SaveExploits0References8
OSV
OSV
•added 2024/05/06 1:04 p.m.•80 views

RLSA-2024:1687 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS1 v1.5 padding Marvin CVE-2023-46809 nodejs: reading unprocessed HTT...

9.8CVSS7.4AI score0.03168EPSS
SaveExploits0References8
OSV
OSV
•added 2024/04/16 12:30 a.m.•80 views

GHSA-J62R-WXQQ-F3GF mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the createmodelversion function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the...

7.5CVSS7.3AI score0.00859EPSS
SaveExploits1References3
OSV
OSV
•added 2024/04/12 7:21 a.m.•80 views

BIT-MAGENTO-2024-20759

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a...

8.1CVSS7AI score0.01028EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/10 5:07 p.m.•80 views

GHSA-V782-XR4W-3VQX XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted

Impact It is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it's possible for an attacker to have access to the hash password of a user if they have rights to edit the users' page. No...

6.8CVSS5.7AI score0.00376EPSS
SaveExploits0References7
OSV
OSV
•added 2024/04/06 6:33 p.m.•80 views

BIT-WORDPRESS-2024-31211 Remote Code Execution in `WP_HTML_Token`

WordPress is an open publishing platform for the Web. Unserialization of instances of the WPHTMLToken class allows for code execution via its destruct magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.0 are not affected...

9.8CVSS5.5AI score0.02763EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/02 12:00 a.m.•80 views

ALSA-2024:1607 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery CVE-2022-38096 kernel: Out of boundary write in perfreadgroup as result of overflow a perfevent's readsize CVE-2023-6931 kernel: GS...

7.8CVSS7.9AI score0.28058EPSS
SaveExploits18References16
OSV
OSV
•added 2024/03/31 6:21 p.m.•80 views

BIT-MASTODON-2024-25619 Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon

Mastodon is a free, open-source social network server based on ActivityPub. When an OAuth Application is destroyed, the streaming server wasn't being informed that the Access Tokens had also been destroyed, this could have posed security risks to users by allowing an application to continue...

4.3CVSS4.2AI score0.00363EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/25 7:45 p.m.•80 views

GHSA-6P68-36M6-392R phpMyFAQ Stored Cross-site Scripting at FAQ News Content

Summary By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. PoC 1. Edit a FAQ news, intercept the request and modify the news parameter in the POST body with the following...

4.3CVSS5.5AI score0.00542EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/20 3:44 p.m.•80 views

GHSA-X4X5-JV3X-9C7M `qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code

Summary deserializing json data using qiskitibmruntime.RuntimeDecoder can be made to execute arbitrary code given a correctly formatted input string Details RuntimeDecoder is supposed to be able to deserialize JSON strings containing various special types encoded via RuntimeEncoder. However, one...

5.3CVSS5.9AI score0.00372EPSS
SaveExploits1References5
OSV
OSV
•added 2024/03/18 5:35 p.m.•80 views

GO-2024-2614 Password brute force attack in github.com/IceWhaleTech/CasaOS-UserService

The CasaOS web application does not have protection against password brute force attacks. An attacker can use a password brute force attack to find and gain full access to the server. This vulnerability allows attackers to get super user-level access over the server...

9.8CVSS9.5AI score0.00977EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/12 8:50 p.m.•80 views

GHSA-FR3W-2P22-6W7P URL Redirection to Untrusted Site in OAuth2/OpenID in directus

Summary The authentication API has a redirect parameter that can be exploited as an open redirect vulnerability as the user tries to log in via the API URL https://docs.directus.io/reference/authentication.htmllogin-using-sso-providers /auth/login/google?redirect for example. Details There's a...

5.4CVSS5AI score0.00583EPSS
SaveExploits1References5
OSV
OSV
•added 2024/03/10 3:30 a.m.•80 views

GHSA-X2VG-5WRF-VJ6V 1Panel is vulnerable to command injection

1Panel is vulnerable to command injection. This vulnerability has been classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the...

6.3CVSS8.1AI score0.03044EPSS
SaveExploits1References7
OSV
OSV
•added 2024/03/06 6:30 p.m.•80 views

GHSA-8H2M-54WH-GWJ3 Jenkins docker-build-step Plugin missing permission check

A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting futu...

6.3CVSS8.5AI score0.00826EPSS
SaveExploits0References4
OSV
OSV
•added 2024/03/06 11:15 a.m.•80 views

BIT-TENSORFLOW-2022-21732 Memory exhaustion in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS5.2AI score0.00765EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/06 11:14 a.m.•80 views

BIT-TENSORFLOW-2022-35940 Int overflow in `RaggedRangeOp` in Tensoflow

TensorFlow is an open source platform for machine learning. The RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it can overflow when converted to an int64. This triggers an InvalidArgument but also...

7.5CVSS6.6AI score0.00701EPSS
SaveExploits0References4
OSV
OSV
•added 2024/03/06 11:07 a.m.•80 views

BIT-JENKINS-2020-2099

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonati...

8.6CVSS8.2AI score0.01012EPSS
SaveExploits0References7
OSV
OSV
•added 2024/03/06 11:07 a.m.•80 views

BIT-SUITECRM-2023-5350 SQL Injection in salesagility/suitecrm

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...

9.1CVSS8AI score0.0191EPSS
SaveExploits2References3
OSV
OSV
•added 2024/03/06 11:05 a.m.•80 views

BIT-SILVERSTRIPE-2021-41559

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array that enables a remote attack via a crafted XML document...

6.5CVSS6.3AI score0.01061EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/06 11:04 a.m.•80 views

BIT-PUBLIFY-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

6.5CVSS6.3AI score0.00828EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 11:03 a.m.•80 views

BIT-PUBLIFY-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

6.5CVSS6.6AI score0.00898EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 11:02 a.m.•80 views

BIT-PUBLIFY-2023-0569

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

8.1CVSS6.6AI score0.007EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 10:58 a.m.•80 views

BIT-NATS-2022-26652

NATS nats-server before 2.7.4 allows Directory Traversal with write access via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected...

6.5CVSS6.4AI score0.02342EPSS
SaveExploits0References5
OSV
OSV
•added 2024/03/06 10:57 a.m.•80 views

BIT-MASTODON-2022-0432 Prototype Pollution in mastodon/mastodon

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0...

7.4CVSS6.2AI score0.04429EPSS
SaveExploits1References3
OSV
OSV
•added 2024/03/06 10:56 a.m.•80 views

BIT-LIVEHELPERCHAT-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

6.7CVSS5.1AI score0.00607EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 10:54 a.m.•80 views

BIT-DISCOURSE-2023-38706 Discourse vulnerable to DoS via drafts

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the stable branch, a malicious user can create an unlimited number of drafts with very long draft keys which may end up exhausting the resources on the server. The issue is patched in version 3.1.1 of the stable branch...

6.5CVSS6.6AI score0.0077EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/06 10:53 a.m.•80 views

BIT-DRUPAL-2022-25273

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...

7.5CVSS7.2AI score0.00568EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 10:53 a.m.•80 views

BIT-GUACAMOLE-2023-30576

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...

8.1CVSS7.6AI score0.01113EPSS
SaveExploits0References1
Total number of security vulnerabilities5000