2024-11-19 OpenStack, a popular open-source cloud computing platform, has been found to have a moderate-severity vulnerability. The issue arises when […]

2024-11-19 Version: Vulnerability: Regular Expression Denial of Service (ReDoS) Severity: Low Date: Nov 15, 2024 : A low-severity ReDoS vulnerability […]

2024-11-19 The aiohttp Python library has a vulnerability that could allow an attacker to exploit incorrect parsing of chunk extensions […]

2024-11-19 Platform: LibreNMS Version: (Unaffected versions to be filled by official source) Vulnerability: Stored XSS Severity: Critical Date: Unknown What […]

2024-11-19 A security vulnerability has been identified in Moodle, allowing users with certain privileges to delete audiences from reports they […]

2024-11-19 Platform: Cobbler Version: 3.0.0 – 3.2.2 / 3.3.6 (all prior to 3.2.3 and 3.3.7) Vulnerability: Improper Authentication Severity: Critical […]

2024-11-19 A security vulnerability, classified as moderate severity, has been identified in Moodle. This issue, known as IDOR (Insecure Direct […]

2024-11-19 Version: < v2.10.2 Vulnerability: Multiple Command Injection Vulnerabilities Severity: Medium Date: [Date of article publication] What Undercode Says: step-security/harden-runner […]

2024-11-19 A vulnerability has been discovered in the Debezium database connector, which could potentially allow attackers to inject malicious scripts. […]

2024-11-19 Moodle has a vulnerability that allows unauthorized access to report schedules. This issue is classified as moderate severity. Form: […]

2024-11-19 Platform: PhpSpreadsheet Version: All versions before 1.9.4, 2.1.3, 2.3.2, and 3.4.0 Vulnerability: XXE (XML External Entity) Severity: High Date: […]

2024-11-19 : A vulnerability was discovered in the `sharks` crate, which allowed for a bias when generating random polynomials for […]

2024-11-19 Apache Tomcat has a vulnerability that could lead to a request and/or response mix-up between users due to incorrect […]

2024-11-19 A vulnerability has been identified in Spring MVC controllers that utilize `@RequestBody byte[]` method parameters. This vulnerability can be […]