Archive
14 November 2024
Vulnerabilities first published on this day (UTC), newest first.
20 results · Clear filters · Feed
-
Low —
s2n-tls has undefined behavior at process exit
### Impact s2n-tls uses the Linux atexit function to register functions that clean up the global state when the process exits. In multi-threaded environments, the atexit handler may clean up state which is still in use by other threads. When this occurs, the …
-
Low 3.7
HCL Connections is vulnerable to a broken access control vulnerability
HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.
-
Low 3.7
Apereo CAS login session expiration
A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an…
-
Low 3.1
Incorrect Ownership Assignment in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from 17.6 before 17.6.2. This issue allows an attacker to create a group with a name mat…
-
Low 3.1
PostgreSQL libpq retains an error message from man-in-the-middle
Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-middle attacker could send a long error message that a human …
-
Low 3.1
IBM Security ReaQta cross-site scripting
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste…
-
Low 2.1
PAN-OS: Server-Side Request Forgery in WildFire
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.
-
Low 3.5
A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via t…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Proj…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via t…
-
Low 3.5
A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the userna…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 …
-
Low 3.5
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the use…
-
Low 3.5
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstnam…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0…