|
309551
|
5.5 |
MEDIUM
Local
|
apple
|
watchos tvos iphone_os ipados macos
|
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, watchOS 11, visionOS 2, iOS 18 and …
|
CWE-120
Classic Buffer Overflow
|
CVE-2024-44144
|
2024-10-30 02:34 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309552
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings
|
CWE-79
Cross-site Scripting
|
CVE-2024-50577
|
2024-10-30 02:18 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309553
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest
|
CWE-79
Cross-site Scripting
|
CVE-2024-50576
|
2024-10-30 02:18 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309554
|
6.1 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API
|
CWE-79
Cross-site Scripting
|
CVE-2024-50575
|
2024-10-30 02:18 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309555
|
7.5 |
HIGH
Network
|
informatik.hu-berlin
|
flair
|
A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loade…
|
CWE-94
Code Injection
|
CVE-2024-10073
|
2024-10-30 02:18 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309556
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag
|
CWE-79
Cross-site Scripting
|
CVE-2024-50581
|
2024-10-30 02:17 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309557
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule
|
CWE-79
Cross-site Scripting
|
CVE-2024-50580
|
2024-10-30 02:17 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309558
|
6.1 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible
|
CWE-79
Cross-site Scripting
|
CVE-2024-50579
|
2024-10-30 02:17 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309559
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page
|
CWE-79
Cross-site Scripting
|
CVE-2024-50578
|
2024-10-30 02:17 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309560
|
5.4 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements
|
CWE-79
Cross-site Scripting
|
CVE-2024-50582
|
2024-10-30 02:16 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|