|
306681
|
6.4 |
MEDIUM
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to.
By sending a request that attempts to updat…
|
CWE-863
Incorrect Authorization
|
CVE-2022-31667
|
2024-11-20 00:25 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306682
|
7.7 |
HIGH
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating tag retention policies.
By sending a request to update a tag retention policy with an id that belongs to a project that the currently aut…
|
CWE-863
Incorrect Authorization
|
CVE-2022-31670
|
2024-11-20 00:20 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306683
|
7.7 |
HIGH
Network
|
linuxfoundation
|
harbor
|
Harbor fails to validate the user permissions when updating tag immutability policies.
By sending a request to update a tag immutability policy with an id that belongs to a
project that the current…
|
CWE-863
Incorrect Authorization
|
CVE-2022-31669
|
2024-11-20 00:20 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306684
|
9.8 |
CRITICAL
Network
|
backpackforlaravel
|
filemanager
|
FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerabilit…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2024-52306
|
2024-11-20 00:02 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306685
|
9.8 |
CRITICAL
Network
|
gogs
|
gogs
|
A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter duri…
|
CWE-77
Command Injection
|
CVE-2022-1884
|
2024-11-19 23:47 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306686
|
5.4 |
MEDIUM
Network
|
usememos
|
memos
|
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and r…
|
CWE-79
Cross-site Scripting
|
CVE-2023-0109
|
2024-11-19 23:44 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306687
|
6.5 |
MEDIUM
Network
|
wallabag
|
wallabag
|
wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in ve…
|
CWE-352
Origin Validation Error
|
CVE-2023-0737
|
2024-11-19 23:43 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306688
|
- |
|
-
|
-
|
A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local or via SSH) a privilege escalation to the administrative level due to the usage…
|
-
|
CVE-2024-11075
|
2024-11-19 23:15 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306689
|
- |
|
-
|
-
|
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These …
|
-
|
CVE-2024-10204
|
2024-11-19 23:15 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306690
|
- |
|
-
|
-
|
Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash th…
|
-
|
CVE-2024-21538
|
2024-11-19 23:15 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|