|
571
|
6.4 |
MEDIUM
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to.
By sending a request that attempts to updat…
Update
|
CWE-863
Incorrect Authorization
|
CVE-2022-31667
|
2024-11-20 00:25 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
572
|
7.7 |
HIGH
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating tag retention policies.
By sending a request to update a tag retention policy with an id that belongs to a project that the currently aut…
Update
|
CWE-863
Incorrect Authorization
|
CVE-2022-31670
|
2024-11-20 00:20 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
573
|
7.7 |
HIGH
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating tag immutability policies.
By sending a request to update a tag immutability policy with an id that belongs to a
project that the current…
Update
|
CWE-863
Incorrect Authorization
|
CVE-2022-31669
|
2024-11-20 00:20 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
574
|
- |
|
-
|
-
|
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-10524
|
2024-11-20 00:15 |
2024-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
575
|
9.8 |
CRITICAL
Network
backpackforlaravel
|
filemanager
|
FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerabilit…
Update
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2024-52306
|
2024-11-20 00:02 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
576
|
4.3 |
MEDIUM
Network
|
mozilla
|
thunderbird
|
Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.
Update
|
NVD-CWE-noinfo
|
CVE-2024-11159
|
2024-11-19 23:56 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
577
|
9.8 |
CRITICAL
Network
gogs
|
gogs
|
A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter duri…
Update
|
CWE-77
Command Injection
|
CVE-2022-1884
|
2024-11-19 23:47 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
578
|
5.4 |
MEDIUM
Network
|
usememos
|
memos
|
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and r…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2023-0109
|
2024-11-19 23:44 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
579
|
6.5 |
MEDIUM
Network
|
wallabag
|
wallabag
|
wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in ve…
Update
|
CWE-352
Origin Validation Error
|
CVE-2023-0737
|
2024-11-19 23:43 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
580
|
- |
|
-
|
-
|
DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.
New
|
-
|
CVE-2024-52711
|
2024-11-19 23:15 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
