4

CVSS3.1

CVE-2024-56138 - Timestamp signature generation lacks certificate revocation check in notion-go

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the timestamp signature generation, the revocation status of the certificate(s) used to ge…

πŸ“… Published: Jan. 13, 2025, 9:37 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.8

CVSS4.0

CVE-2024-56323 - OpenFGA Authorization Bypass

OpenFGA is an authorization/permission engine. IN OpenFGA v1.3.8 to v1.8.2 (Helm chart openfga-0.1.38 to openfga-0.2.19, docker v1.3.8 to v.1.8.2) are vulnerable to authorization bypass under the following conditions: 1. calling Check API or ListObjects with a model that uses [conditions](https://…

πŸ“… Published: Jan. 13, 2025, 9:33 p.m. πŸ”„ Last Modified: Dec. 31, 2025, 2:58 p.m.

6.4

CVSS4.0

CVE-2025-22613 - WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `informacao_adicional.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scri…

πŸ“… Published: Jan. 13, 2025, 8:59 p.m. πŸ”„ Last Modified: April 9, 2025, 6:26 p.m.

6.4

CVSS4.0

CVE-2025-22614 - WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'no…

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `dependente_editarInfoPessoal.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malici…

πŸ“… Published: Jan. 13, 2025, 8:58 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 6:57 p.m.

6.4

CVSS4.0

CVE-2025-22615 - WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the `Cadastro_Atendido.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scri…

πŸ“… Published: Jan. 13, 2025, 8:57 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 6:56 p.m.

6.4

CVSS4.0

CVE-2025-22616 - WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'd…

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `dependente_parentesco_adicionar.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject mal…

πŸ“… Published: Jan. 13, 2025, 8:54 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 6:56 p.m.

6.4

CVSS4.0

CVE-2025-22617 - WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the `editar_socio.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts i…

πŸ“… Published: Jan. 13, 2025, 8:52 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 6:56 p.m.

6.4

CVSS4.0

CVE-2025-22618 - WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_cargo.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts i…

πŸ“… Published: Jan. 13, 2025, 8:50 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 6:55 p.m.

6.4

CVSS4.0

CVE-2025-22619 - WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the `editar_permissoes.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scri…

πŸ“… Published: Jan. 13, 2025, 8:47 p.m. πŸ”„ Last Modified: Feb. 13, 2025, 7:44 p.m.

4.2

CVSS3.1

CVE-2025-22134 - heap-buffer-overflow with visual mode in Vim < 9.1.1003

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual…

πŸ“… Published: Jan. 13, 2025, 8:41 p.m. πŸ”„ Last Modified: Aug. 14, 2025, 5:43 p.m.
Total resulsts: 345302
Page 6777 of 34,531
Β« previous page Β» next page
Filters