Lucene search
+L
OsvMost viewed

993470 matches found

OSV
OSV
added 2024/08/21 4:4 p.m.62 views

GO-2022-1219 usememos/memos Denial of Service vulnerability in github.com/usememos/memos

usememos/memos Denial of Service vulnerability in github.com/usememos/memos...

7.6CVSS7.4AI score0.00678EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/20 8:31 p.m.62 views

GO-2023-1940 1Panel command injection vulnerability in Firewall ip functionality in github.com/1Panel-dev/1Panel

1Panel command injection vulnerability in Firewall ip functionality in github.com/1Panel-dev/1Panel...

8.8CVSS7.9AI score0.05845EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/20 8:26 p.m.62 views

GO-2023-1577 Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd

Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd...

9.1CVSS8.9AI score0.00671EPSS
SaveExploits0References3
OSV
OSV
added 2024/08/17 7:16 a.m.62 views

BIT-CILIUM-2024-42488 Cilium agent's race condition may lead to policy bypass for Host Firewall policy

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in the Cilium agent can cause the agent to ignore labels that should be applied to a node. This could in turn cause CiliumClusterwideNetworkPolicies...

6.8CVSS6.3AI score0.005EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/05 9:50 p.m.62 views

GHSA-92VC-4FCW-G68Q CasaOS Command Injection vulnerability

CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue...

9.3CVSS8.8AI score0.0127EPSS
SaveExploits1References8
OSV
OSV
added 2024/08/01 3:32 p.m.62 views

GHSA-JR9X-3X7M-4J75 Mattermost allows a remote actor to make an arbitrary local channel read-only

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5 and 9.8.x = 9.8.1 fail to disallow the modification of local channels by a remote, when shared channels are enabled, which allows a malicious remote to make an arbitrary local channel read-only...

5.1CVSS4.5AI score0.00276EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/01 3:32 p.m.62 views

GHSA-VG67-CHM7-8M3J Mattermost allows remote actor to create/update/delete posts in arbitrary channels

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly validate synced posts, when shared channels are enabled, which allows a malicious remote to create/update/delete arbitrary posts in arbitrary channels...

7CVSS6AI score0.00362EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/09 2:1 p.m.62 views

SUSE-SU-2024:2360-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47103: net: sock: preserve kabi for sock bsc1221010. - CVE-2021-47191: Fix out-of-bound read in respreadcap16 bsc1222866. - CVE-2021-47267: usb: fix...

9.8CVSS8.5AI score0.67994EPSS
SaveExploits9References312
OSV
OSV
added 2024/07/09 8:43 a.m.62 views

BIT-DISCOURSE-2024-36122 Discourse doesn't limit reviewable user serializer payload

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch and version 3.3.0.beta4 on the beta and tests-passed branches, moderators using the review queue to review users may see a users email address even when the Allow moderators to view email addresses settin...

4.3CVSS4.3AI score0.00366EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/03 7:16 a.m.62 views

BIT-APACHE-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution

Potential SSRF in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by modproxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue...

7.5CVSS7.4AI score0.35447EPSS
SaveExploits0References5
OSV
OSV
added 2024/07/02 9:20 p.m.62 views

GHSA-VC7J-99JW-JRQM aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.01 and prior to versions 2022.10.10, 2023.10.6, and 2024.04.6, an improper access control vulnerability allows an editor to modify and take over an admin account in the back end. Versions 2022.10.10,...

8.2CVSS6.7AI score0.00439EPSS
SaveExploits0References6
OSV
OSV
added 2024/07/01 11:19 a.m.62 views

BIT-HUBBLE-UI-BACKEND-2022-29178

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.15 contains an incorrect default permissions vulnerability. Operating Systems with users belonging to the group ID 100...

8.8CVSS8.3AI score0.00277EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/28 2:15 p.m.62 views

UBUNTU-CVE-2024-38531

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...

3.6CVSS5.8AI score0.00143EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/09 7:42 p.m.62 views

CVE-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

9.8CVSS7.1AI score
SaveExploits0References26
OSV
OSV
added 2024/06/08 9:30 p.m.62 views

GHSA-W5XM-MX47-V7C8 lunary-ai/lunary allows users unauthorized access to projects

Withdrawn: This advisory was incorrectly linked the the npm package lunary. The advisory is valid, but not for that packlage. In lunary-ai/lunary version v1.2.13, an incorrect authorization vulnerability exists that allows unauthorized users to access and manipulate projects within an organizatio...

9.8CVSS9.5AI score
SaveExploits0References4
OSV
OSV
added 2024/06/06 12:29 p.m.62 views

CGA-QQGX-9XQ7-84R8

Bulletin has no description...

5.1CVSS5.1AI score0.00213EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:25 p.m.62 views

CGA-C49Q-4CQQ-XWX4

Bulletin has no description...

5.9CVSS6.6AI score0.01001EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:22 p.m.62 views

CGA-46H3-844V-3JGV

Bulletin has no description...

9.8CVSS9.1AI score0.00836EPSS
SaveExploits1
OSV
OSV
added 2024/06/06 8:15 a.m.62 views

CVE-2024-4177

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise...

9.8CVSS5.8AI score0.00431EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/04 5:53 p.m.62 views

GHSA-632P-P495-25M5 Directus is soft-locked by providing a string value to random string util

Describe the Bug Providing a non-numeric length value to the random string generation utility will create a memory issue breaking the capability to generate random strings platform wide. This creates a denial of service situation where logged in sessions can no longer be refreshed as sessions...

7.5CVSS5.9AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2024/06/01 12:0 a.m.62 views

ASB-A-316153291

In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITESECURESETTINGS due to unsafe deserialization. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS8AI score0.00779EPSS
SaveExploits12References2
OSV
OSV
added 2024/05/21 4:15 p.m.62 views

UBUNTU-CVE-2023-52839

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Do not broadcast to other cpus when starting a counter This command: $ perf record -e cycles:k -e instructions:k -c 10000 -m 64M dd if=/dev/zero of=/dev/null count=1000 gives rise to this kernel warning: 444.364395...

3.3CVSS5.7AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
added 2024/05/21 2:47 p.m.62 views

GHSA-GVPC-3PJ6-4M9W Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane

Impact Stored Cross-site scripting XSS enable attackers that have access to backoffice to bring malicious content into a website or application. Affected versions Umbraco CMS = 8.00 Patches This is fixed in 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer...

4.2CVSS4.4AI score0.00351EPSS
SaveExploits0References7
OSV
OSV
added 2024/05/14 7:38 a.m.62 views

BIT-WORDPRESS-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

7.2CVSS6.1AI score0.70822EPSS
SaveExploits4References6
OSV
OSV
added 2024/05/13 2:10 p.m.62 views

GHSA-56XG-WFCC-G829 llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

Description llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUMA, LoRa settings, loading tokenizers, and...

9.6CVSS9.2AI score0.2842EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/07 3:30 p.m.62 views

GHSA-299Q-3P96-5898 Apache Superset Incorrect Authorization vulnerability

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue...

4.3CVSS4.3AI score0.00699EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/30 12:0 a.m.62 views

ALSA-2024:2551 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS7.4AI score0.99995EPSS
SaveExploits1References14
OSV
OSV
added 2024/04/25 6:31 p.m.62 views

GHSA-7J7J-66CV-M239 ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

Impact ZITADEL provides users the possibility to use Time-based One-Time-Password TOTP and One-Time-Password OTP through SMS and Email. While ZITADEL already gives administrators the option to define a Lockout Policy with a maximum amount of failed password check attempts, there was no such...

7.1CVSS7.2AI score0.00456EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/16 12:30 a.m.62 views

GHSA-J62R-WXQQ-F3GF mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the createmodelversion function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the...

7.5CVSS7.3AI score0.00859EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/25 7:39 p.m.62 views

GHSA-VXQ2-P937-3PX3 Pinned entity creation form shows wrong data

Impact Logged in user can access page state data of pinned pages of other users by pageId hash. Patch patch --- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php +++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php @@ -158,6 +158,13 @@...

4.3CVSS4.5AI score0.0044EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/20 3:18 p.m.62 views

GHSA-88WC-FCJ9-Q3R9 GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)

Summary A stored cross-site scripting XSS vulnerability exists that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the GWC Demos Page. Access to...

4.8CVSS4.8AI score0.00405EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/15 4:44 p.m.62 views

GHSA-5H3X-6GWF-73JM vantage6 vulnerable to a username timing attack on recover password/MFA token

Impact Much like https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53, it is possible to find which usernames exist in vantage6 by calling the API routes /recover/lost and /2fa/lost, which send emails to users if they have lost their password or MFA token. Usernames can be...

5.3CVSS4.4AI score0.00394EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/06 11:8 a.m.62 views

BIT-VAULT-2023-4680 Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption

HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the...

6.8CVSS6.8AI score0.00368EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:6 a.m.62 views

BIT-DISCOURSE-2022-24850 Category group permissions leaked in Discourse

Discourse is an open source platform for community discussion. A category's group permissions settings can be viewed by anyone that has access to the category. As a result, a normal user is able to see whether a group has read/write permissions in the category even though the information should...

5.3CVSS4.8AI score0.00645EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:4 a.m.62 views

BIT-PYTHON-2022-48565

An XML External Entity XXE issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities...

9.8CVSS8.7AI score0.04268EPSS
SaveExploits3References8
OSV
OSV
added 2024/03/06 11:3 a.m.62 views

BIT-PUBLIFY-2022-1810

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...

9.9CVSS4.4AI score0.00827EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 11:2 a.m.62 views

BIT-POSTGRESQL-2023-5869 Postgresql: buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

8.8CVSS8.8AI score0.04322EPSS
SaveExploits0References36
OSV
OSV
added 2024/03/06 11:1 a.m.62 views

BIT-NODE-2023-30585

A vulnerability has been identified in the Node.js .msi version installation process, specifically affecting Windows users who install Node.js using the .msi installer. This vulnerability emerges during the repair operation, where the "msiexec.exe" process, running under the NT AUTHORITY\SYSTEM...

7.5CVSS7.4AI score0.01467EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:1 a.m.62 views

BIT-PHPLIST-2023-27576

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified...

6.7CVSS6.6AI score0.00343EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 10:57 a.m.62 views

BIT-MATTERMOST-2023-5333

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

6.5CVSS5.3AI score0.00493EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:56 a.m.62 views

BIT-JASPERREPORTS-2022-22771

The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft...

9.9CVSS8.6AI score0.02129EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:56 a.m.62 views

BIT-ENVOY-2022-21655 Incorrect handling of internal redirects results in crash in Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service. As a workaround turn off internal...

7.5CVSS7.7AI score0.01145EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 10:53 a.m.62 views

BIT-HAPROXY-2023-25950

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service DoS condition...

7.3CVSS7AI score0.02942EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 10:52 a.m.62 views

BIT-GIT-2020-5260 malicious URLs may cause Git to present stored credentials to the wrong server

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system...

9.3CVSS7.3AI score0.10047EPSS
SaveExploits2References20
OSV
OSV
added 2024/03/06 10:50 a.m.62 views

BIT-APISIX_DASHBOARD-2021-33190 Bypass network access control

In Apache APISIX Dashboard version 2.6, we changed the default value of listen host to 0.0.0.0 in order to facilitate users to configure external network access. In the IP allowed list restriction, a risky function was used for the IP acquisition, which made it possible to bypass the network limi...

5.3CVSS5.1AI score0.02694EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/28 6:37 p.m.62 views

GHSA-J2PW-VP55-FQQJ Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID

Impact When Flask-AppBuilder is set to AUTHTYPE AUTHOID, allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This vulnerability could grant an attacker unauthorised privilege access if a custom OpenID service is deployed by the...

9.1CVSS5.9AI score0.00857EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/21 12:24 a.m.62 views

GHSA-7RW2-3HHP-RC46 Cross-site Scripting Vulnerability in Statement Browser

Impact A maliciously crafted xAPI statement could be used to perform script or other tag injection in the LRS Statement Browser. Patches The problem is patched in version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS. Workarounds No workarounds exist, we recommend upgrading to version...

4.6CVSS5.9AI score0.00447EPSS
SaveExploits0References7
OSV
OSV
added 2024/02/09 9:30 p.m.62 views

GHSA-Q25H-JCH8-GFRP Concrete CMS vulnerable to stored XSS via the Role Name field

Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS via the Role Name field since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Role Name field which might be executed when users visit the...

2CVSS4.6AI score0.01244EPSS
SaveExploits1References5
OSV
OSV
added 2024/02/05 8:22 p.m.62 views

GHSA-7M8G-FPRR-47FX phpMyFAQ vulnerable to stored XSS on attachments filename

Summary Unsafe echo of filename in phpMyFAQ\phpmyfaq\admin\attachments.php leading to allow execute JavaScript code in client side XSS Details On that snippet code of rendering the file attachments from user tables id ?" title="thema ?" id ? filename ? recordlang ? filesize ? mimetype ? The data...

6.5CVSS6.4AI score0.0088EPSS
SaveExploits1References6
OSV
OSV
added 2024/01/24 6:31 p.m.62 views

GHSA-X22X-5PP9-8V7F Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. Red Hat Dependency Analytics Plugin 0.7.1 and earlier globally disables the...

8CVSS5.5AI score0.00564EPSS
SaveExploits0References5
Total number of security vulnerabilities5000