Lucene search
+L
OsvMost viewed

2099856 matches found

OSV
OSV
added 2025/05/02 6:18 a.m.75 views

BIT-MOODLE-2024-43432 Moodle: authorization headers preserved between "emulated redirects"

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...

5.3CVSS5.3AI score0.00332EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/27 9:34 p.m.75 views

GHSA-37PQ-893F-G7Q5 Apereo CAS code injection vulnerability

A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\RegisteredServiceSimpleFormController.java of the component...

5CVSS7.2AI score0.0046EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/14 9:32 p.m.75 views

GHSA-66RC-VG9F-48M7 jsonschema2pojo has Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow...

5.3CVSS5.6AI score0.00207EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/01 9:30 a.m.75 views

GHSA-3W85-5P9G-H334 Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When...

4.3CVSS7AI score0.00629EPSS
SaveExploits0References7
OSV
OSV
added 2025/02/27 6:27 p.m.75 views

GHSA-5QMP-9X47-92Q8 Rancher's SAML-based login via CLI can be denied by unauthenticated users

Impact A vulnerability has been identified within Rancher where it is possible for an unauthenticated user to list all CLI authentication tokens and delete them before the CLI is able to get the token value. This effectively prevents users from logging in via the CLI when using rancher token as t...

5.3CVSS7AI score0.00582EPSS
SaveExploits0References15
OSV
OSV
added 2025/01/27 7:13 a.m.75 views

BIT-MLFLOW-2024-3848 Path Traversal Bypass in mlflow/mlflow

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

7.5CVSS7.2AI score0.43284EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/27 7:09 a.m.75 views

BIT-CILIUM-OPERATOR-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

6.5CVSS6.2AI score0.00499EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/15 5:43 p.m.75 views

GHSA-2234-FMW7-43WR Hono allows bypass of CSRF Middleware by a request without Content-Type header.

Summary Bypass CSRF Middleware by a request without Content-Type herader. Details Although the csrf middleware verifies the Content-Type Header, Hono always considers a request without a Content-Type header to be safe...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits1References5
OSV
OSV
added 2024/09/30 4:32 p.m.75 views

RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Bulletin has no description...

9.8CVSS8.1AI score0.99569EPSS
SaveExploits47References147
OSV
OSV
added 2024/09/29 5:48 p.m.75 views

RHSA-2021:1313 Red Hat Security Advisory: Satellite 6.9 Release

Bulletin has no description...

8.8CVSS6.7AI score0.45732EPSS
SaveExploits9References398
OSV
OSV
added 2024/09/17 5:55 p.m.75 views

GHSA-V345-W9F2-MPM5 Sentry improperly authorizes muting of alert rules

Impact An authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...

7.1CVSS5.8AI score0.00358EPSS
SaveExploits0References6
OSV
OSV
added 2024/09/17 12:31 a.m.75 views

GHSA-J8GH-87RX-C7W9 OpenShift Controller Manager Improper Privilege Management

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...

9.9CVSS9.5AI score0.01016EPSS
SaveExploits1References12
OSV
OSV
added 2024/09/13 10:00 p.m.75 views

RHSA-2019:2519 Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update

Bulletin has no description...

8.1CVSS7.7AI score0.83594EPSS
SaveExploits33References135
OSV
OSV
added 2024/09/10 3:53 p.m.75 views

GHSA-PVMM-55R5-G3MM XWiki Platform document history including authors of any page exposed to unauthorized actors

Impact The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification both username and displayed name and the version...

6.9CVSS5AI score0.03417EPSS
SaveExploits1References6
OSV
OSV
added 2024/08/27 6:14 p.m.75 views

GHSA-X6XQ-WHH3-GG32 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

Impact Instances of the Apollo Router using either of the following may be impacted by a denial-of-service vulnerability. 1. External Coprocessing with specific configurations; or 2. Native Rust Plugins accessing the Router request body in the RouterService layer Router customizations using Rhai...

8.7CVSS7.5AI score0.00857EPSS
SaveExploits1References8
OSV
OSV
added 2024/08/15 6:31 p.m.75 views

GHSA-75JF-52JG-QQH4 SQL injection in github.com/stashapp/stash

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...

9.1CVSS6.5AI score0.0117EPSS
SaveExploits0References6
OSV
OSV
added 2024/08/05 5:19 p.m.75 views

GHSA-6VJM-54VP-MXHX Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm. A potential exploit where a user can run a bash loop attempting to execute hook tools. If...

8.8CVSS6.1AI score0.00379EPSS
SaveExploits1References6
OSV
OSV
added 2024/07/03 7:17 a.m.75 views

BIT-APACHE-2024-38474 Apache HTTP Server weakness with encoded question marks in backreferences

Substitution encoding issue in modrewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to...

9.8CVSS8.7AI score0.02456EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/01 6:35 p.m.75 views

GHSA-C2HR-CQG6-8J6R ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Impact This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. Patches The algorithm to detect SQL injection has been improved. Workarounds None. References - https://github.com/parse-community/parse-server/security/advisories/GHSA-c2hr-cqg6-8j6r -...

9.8CVSS9.8AI score0.20171EPSS
SaveExploits0References7
OSV
OSV
added 2024/06/15 12:00 a.m.75 views

OPENSUSE-SU-2024:11169-1 php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed...

10CVSS9.1AI score0.99998EPSS
SaveExploits273References97
OSV
OSV
added 2024/06/11 9:12 p.m.75 views

GHSA-FVCQ-4X64-HQXR Jupyter Server Proxy has a reflected XSS issue in host parameter

Impact There is a reflected cross-site scripting XSS issue in jupyter-server-proxy1. The /proxy endpoint accepts a host path segment in the format /proxy/. When this endpoint is called with an invalid host value, jupyter-server-proxy replies with a response that includes the value of host, withou...

9.6CVSS7.2AI score0.00446EPSS
SaveExploits0References7
OSV
OSV
added 2024/06/06 12:29 p.m.75 views

CGA-WXX9-7C6R-JP6P

Bulletin has no description...

5.9CVSS5.9AI score0.00791EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:27 p.m.75 views

CGA-H38J-5XG3-X5V6

Bulletin has no description...

7.4CVSS7.5AI score0.00448EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:26 p.m.75 views

CGA-CP25-64GP-6FM3

Bulletin has no description...

8.8CVSS8.6AI score0.50275EPSS
SaveExploits6
OSV
OSV
added 2024/04/09 1:15 a.m.75 views

CVE-2024-27983

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a T...

6.5AI score
SaveExploits0References5
OSV
OSV
added 2024/04/04 9:15 a.m.75 views

DEBIAN-CVE-2024-26784

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmiperfdomain removal On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the 'power-domain-cells' property was missing. Indeed,...

5.5CVSS5.4AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/31 6:17 p.m.75 views

BIT-ESPOCRM-2024-24818

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...

5.9CVSS5.6AI score0.00615EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/13 9:31 p.m.75 views

GHSA-PMC7-HMMW-G96Q Bagisto vulnerable to Insecure Direct Object Reference (IDOR)

Insecure Direct Object Reference IDOR in Bagisto v.1.5.0 allows an attacker to obtain sensitive information via the invoice ID parameter...

6.5CVSS6.1AI score0.00541EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/06 11:19 a.m.75 views

BIT-TENSORFLOW-2021-29534 CHECK-fail in SparseConcat

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat. This is because the...

5.5CVSS5.4AI score0.00189EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 11:13 a.m.75 views

BIT-TENSORFLOW-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS6.3AI score0.00493EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:13 a.m.75 views

BIT-TENSORFLOW-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS6.3AI score0.00462EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:13 a.m.75 views

BIT-TENSORFLOW-2022-35983 `CHECK` fail in `Save` and `SaveSlices` in TensorFlow

TensorFlow is an open source platform for machine learning. If Save or SaveSlices is run over tensors of an unsupported dtype, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 5dd7b86b84a864b834c6fa3d7f9f51c87efa99d4. Th...

7.5CVSS6.3AI score0.00478EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:03 a.m.75 views

BIT-PHP-2022-31630 OOB read due to insufficient input validation in imageloadfont()

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar function, the read outside allocated buffer will be used. This can lead to crashes or...

7.1CVSS8AI score0.02284EPSS
SaveExploits3References2
OSV
OSV
added 2024/03/06 11:02 a.m.75 views

BIT-PARSE-2022-31089 Invalid file request can crashe parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability...

7.5CVSS7.4AI score0.01131EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:01 a.m.75 views

BIT-ENVOY-2020-11767

Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection negotiated with SNI over HTTPS to .example.com, a request for a domain concurrently configured explicitly e.g., abc.example.com is sent to the servers listening behind .example.com. The outcome shoul...

3.1CVSS3.6AI score0.01818EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/06 11:00 a.m.75 views

BIT-OPENFIRE-2020-24604

A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescriptio...

6.1CVSS5.9AI score0.01169EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/06 10:59 a.m.75 views

BIT-MLFLOW-2023-2356 Relative Path Traversal in mlflow/mlflow

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...

10CVSS7.5AI score0.04153EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 10:58 a.m.75 views

BIT-DISCOURSE-2023-26040

Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the tests-passed branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the...

6.5CVSS6AI score0.0035EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:58 a.m.75 views

BIT-MAGENTO-2021-28585 Magento Commerce improper input validation in customer customer webapi

Magento versions 2.4.2 and earlier, 2.4.1 and earlier and 2.3.6 and earlier are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails...

5.3CVSS6AI score0.01578EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 10:56 a.m.75 views

BIT-MLFLOW-2023-6974 Server-Side Request Forgery (SSRF)

A malicious user could use this issue to access internal HTTPs servers and in the worst case ie: aws instance it could be abuse to get a remote code execution on the victim machine...

9.8CVSS9.4AI score0.01519EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 10:51 a.m.75 views

BIT-AIRFLOW-2023-49920 Apache Airflow: Missing CSRF protection on DAG/trigger

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the executi...

6.5CVSS6.4AI score0.01032EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/01 8:11 p.m.75 views

GHSA-5MHG-WV8W-P59J Directus version number disclosure

Impact Currently the exact Directus version number is being shipped in compiled JS bundles which are accessible without authentication. With this information a malicious attacker can trivially look for known vulnerabilities in Directus core or any of its shipped dependencies in that specific...

5.3CVSS5.3AI score0.0057EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/09 12:00 a.m.75 views

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

9.8CVSS7.2AI score
SaveExploits0References4
OSV
OSV
added 2024/02/05 8:19 p.m.75 views

GHSA-9XFW-JJQ2-7V8H 1Panel set-cookie is missing the Secure keyword

Summary The https cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text when accessing http accidentally. https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Headers/Set-Cookiesecure PoC Directly configure https for the panel, and the...

3.5CVSS7.3AI score0.00304EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/31 3:21 p.m.75 views

BIT-LIFERAY-2022-25146

The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to exfiltrate the CSRF token via a crafted event message...

5.3CVSS5.2AI score0.00452EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/10 6:30 p.m.75 views

GHSA-V977-H4HM-RRFF WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability

A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to bruteforce users credentials. An attacker can send a seri...

7.3CVSS6.7AI score0.00668EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/03 9:26 p.m.75 views

GHSA-F8MP-X433-5WPF Arbitrary remote code execution within `wrangler dev` Workers sandbox

Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run...

9.3CVSS8.3AI score0.0063EPSS
SaveExploits0References11
OSV
OSV
added 2023/12/21 6:25 p.m.75 views

GHSA-MPWQ-J3XF-7M5W The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted

An issue was found in the redirecturi validation logic that allows for a bypass of otherwise explicitly allowed hosts. The problem arises in the verifyRedirectUri method, which attempts to enforce rules on user-controllable input, but essentially causes a desynchronization in how Keycloak and...

7.1CVSS5.8AI score0.0095EPSS
SaveExploits0References13
OSV
OSV
added 2023/12/13 3:30 p.m.75 views

GHSA-CWH6-HM53-6W2M Missing access control in Silverpeas

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

7.5CVSS7.4AI score0.00766EPSS
SaveExploits1References5
OSV
OSV
added 2023/11/27 5:25 p.m.75 views

GHSA-HFXH-RJV7-2369 Uptime Kuma Authenticated remote code execution via TailscalePing

Summary The runTailscalePing method of the TailscalePing class injects the hostname parameter inside a shell command, leading to a command injection and the possibility to run arbitrary commands on the server. Details When adding a new monitor on Uptime Kuma, we can select the "Tailscale Ping"...

8.2AI score
SaveExploits0References2
Total number of security vulnerabilities5000