by Kastro CVE-2024-23917 · JetBrains TeamCity
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 481 of 784
JetBrains
mitre
CVE-2024-22836 · mitre
An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier.
CVE-2023-42282 · mitre
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globall…
CVE-2023-38995 · mitre
An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.
CVE-2024-24003 · mitre
jshERP v3.3 is vulnerable to SQL Injection.
CVE-2024-24186 · mitre
Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.
CVE-2024-24189 · mitre
Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.
CVE-2023-48974 · mitre
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted scr…
CVE-2024-24188 · mitre
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.
CVE-2023-40266 · mitre
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911.
CVE-2024-24014 · mitre
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions.
CVE-2024-24021 · mitre
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior.
CVE-2024-24025 · mitre
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload().
CVE-2024-24026 · mitre
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserControl…
CVE-2023-47132 · mitre
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.
CVE-2024-24018 · mitre
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions.
CVE-2024-24019 · mitre
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions.
vyperlang
atmail
CVE-2024-1283 · Google Chrome
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption vi…
CVE-2024-1284 · Google Chrome
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a cr…
Tongda
libgit2
Allegro.AI
CVE-2024-24592 · Allegro.AI ClearML
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrari…
CVE-2024-24594 · Allegro.AI ClearML
A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI’s ClearML platform allows a remote a…
CVE-2024-24593 · Allegro.AI ClearML
A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI’s ClearML platfo…
Ping Identity
CVE-2023-40545 · Ping Identity PingFederate
PingFederate OAuth client_secret_jwt Authentication Bypass
bookingcalendar_project
Cisco
CVE-2024-20252 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticate…
CVE-2024-20254 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticate…
IBM
CVE-2023-32330 · IBM Security Verify Access Appliance
IBM Security Verify Access man in the middle
CVE-2023-32328 · IBM Security Verify Access Appliance
IBM Security Verify Access information disclosure
zopefoundation
CVE-2024-24811 · zopefoundation Products.SQLAlchemyDA
Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution
hipresta
Juanpao
CVE-2024-1259 · Juanpao JPShop
Juanpao JPShop API AppController.php unrestricted upload
CVE-2024-1261 · Juanpao JPShop
Juanpao JPShop API ComboController.php actionIndex unrestricted upload
CVE-2024-1260 · Juanpao JPShop
Juanpao JPShop API ComboController.php actionIndex unrestricted upload
CVE-2024-1262 · Juanpao JPShop
Juanpao JPShop API MaterialController.php actionUpdate unrestricted upload
CVE-2024-1263 · Juanpao JPShop
Juanpao JPShop API PosterController.php actionUpdate unrestricted upload
CVE-2024-1264 · Juanpao JPShop
Juanpao JPShop UploadsController.php actionUpdate unrestricted upload
novel-plus
xxyopen
CodeAstro
CVE-2024-1268 · CodeAstro Restaurant POS System
CodeAstro Restaurant POS System update_product.php unrestricted upload
store-opart
Liferay
pimcore
CVE-2024-24822 · pimcore admin-ui-classic-bundle
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Qualcomm, Inc.
CVE-2023-43534 · Qualcomm, Inc. Snapdragon
Use of Out-of-range Pointer Offset in WLAN HOST
CVE-2023-43520 · Qualcomm, Inc. Snapdragon