Bugs with TODO items

Hide "check" TODOs

BugDescriptionNote
CVE-2022-20685A vulnerability in the Modbus preprocessor of the Snort detection engi ...check
CVE-2022-23538github.com/sylabs/scs-library-client is the Go client for the Singular ...check details, might as well affect golang-github-apptainer-container-library-client
CVE-2023-26044react/http is an event-driven, streaming HTTP client and server implem ...check, is embedded inicinga-php-thirdparty, icingaweb2-module-reactbundle possibly affected
CVE-2023-49316In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively larg ...check if affecting ldap-account-manager or unused path
CVE-2023-50251php-svg-lib is an SVG file parsing / rendering library. Prior to versi ...check, other packages are embedding the library: civicrm, icinga-php-thirdparty and icingaweb2 to be checked
CVE-2023-50252php-svg-lib is an SVG file parsing / rendering library. Prior to versi ...check, other packages are embedding the library: civicrm, icinga-php-thirdparty and icingaweb2 to be checked
CVE-2023-50262Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Do ...check sources embedding php-dompdf if affected
CVE-2024-10034The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTub ...check
CVE-2024-10316The Stratum \u2013 Elementor Widgets plugin for WordPress is vulnerabl ...check
CVE-2024-10666The Easy Twitter Feed \u2013 Twitter feeds plugin for WP plugin for Wo ...check
CVE-2024-10675The affiliate-toolkit plugin for WordPress is vulnerable to Reflected ...check
CVE-2024-10792The Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels pl ...check
CVE-2024-11088The Simple Membership plugin for WordPress is vulnerable to Sensitive ...check
CVE-2024-11089The Anonymous Restricted Content plugin for WordPress is vulnerable to ...check
CVE-2024-11104The Sky Addons for Elementor (Free Templates Library, Live Copy, Anima ...check
CVE-2024-11225The Premium Packages \u2013 Sell Digital Products Securely plugin for ...check
CVE-2024-11320Arbitrary commands execution on the server by exploiting a command inj ...check
CVE-2024-11355The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordP ...check
CVE-2024-11371The Theater for WordPress plugin for WordPress is vulnerable to Reflec ...check
CVE-2024-11381The Control horas plugin for WordPress is vulnerable to Stored Cross-S ...check
CVE-2024-11404Unrestricted Upload of File with Dangerous Type, Improper Input Valida ...check
CVE-2024-11406Improper Neutralization of Input During Web Page Generation (XSS or 'C ...check
CVE-2024-11456The Run Contests, Raffles, and Giveaways with ContestsWP plugin for Wo ...check
CVE-2024-11587A vulnerability was found in idcCMS 1.60. It has been classified as pr ...check
CVE-2024-11588A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has ...check
CVE-2024-11589A vulnerability classified as critical was found in itsourcecode Tailo ...check
CVE-2024-11590A vulnerability, which was classified as critical, has been found in 1 ...check
CVE-2024-11591A vulnerability, which was classified as critical, was found in 1000 P ...check
CVE-2024-11592A vulnerability has been found in 1000 Projects Beauty Parlour Managem ...check
CVE-2024-11601The Sky Addons for Elementor (Free Templates Library, Live Copy, Anima ...check
CVE-2024-21786An OS command injection vulnerability exists in the web interface conf ...check
CVE-2024-21855A lack of authentication vulnerability exists in the HTTP API function ...check
CVE-2024-22420JupyterLab is an extensible environment for interactive and reproducib ...check completeness, src:jupyter-notebook?
CVE-2024-22421JupyterLab is an extensible environment for interactive and reproducib ...check completeness, src:jupyter-notebook?
CVE-2024-24820Icinga Director is a tool designed to make Icinga 2 configuration hand ...check details
CVE-2024-28025Three OS command injection vulnerabilities exist in the web interface ...check
CVE-2024-28026Three OS command injection vulnerabilities exist in the web interface ...check
CVE-2024-28027Three OS command injection vulnerabilities exist in the web interface ...check
CVE-2024-28180Package jose aims to provide an implementation of the Javascript Objec ...check completeness
CVE-2024-28892An OS command injection vulnerability exists in the name parameter of ...check
CVE-2024-29224An OS command injection vulnerability exists in the NAT parameter of G ...check
CVE-2024-30896InfluxDB through 2.7.10 allows allAccess administrators to retrieve al ...check details of issue
CVE-2024-31408OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG ...check
CVE-2024-38296Dell Edge Gateway 5200 (Coffee Lake S), versions prior to 12.0.94.2380 ...check
CVE-2024-39290Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM ...check
CVE-2024-40075Laravel v11.x was discovered to contain an XML External Entity (XXE) v ...check, maybe src:php-laravel, but unclear report https://gitee.com/Q16G/laravel_bug/blob/master/laravelBug.md
CVE-2024-44306A buffer overflow issue was addressed with improved memory handling. T ...check
CVE-2024-44307A buffer overflow issue was addressed with improved memory handling. T ...check
CVE-2024-44308The issue was addressed with improved checks. This issue is fixed in S ...check
CVE-2024-44309A cookie management issue was addressed with improved state management ...check
CVE-2024-45194In Zimbra Collaboration (ZCS) 9.0 and 10.0, a vulnerability in the Web ...check
CVE-2024-45512An issue was discovered in webmail in Zimbra Collaboration (ZCS) throu ...check
CVE-2024-45513An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A ...check
CVE-2024-45514An issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A ...check
CVE-2024-45517An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A ...check
CVE-2024-45837Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, ...check
CVE-2024-47142AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L ...check
CVE-2024-48286Linksys E3000 1.0.06.002_US is vulnerable to command injection via the ...check
CVE-2024-48288TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command inject ...check
CVE-2024-48747An issue in alist-tvbox v1.7.1 allows a remote attacker to execute arb ...check
CVE-2024-49504grub2 allowed attackers with access to the grub shell to access files ...check
CVE-2024-49529InDesign Desktop versions 19.0, 20.0 and earlier are affected by an ou ...check
CVE-2024-49588Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 ...check
CVE-2024-50636PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, whi ...check
CVE-2024-51337Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixe ...check
CVE-2024-51364An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows a ...check
CVE-2024-51365An arbitrary file upload vulnerability in the importSettings method of ...check
CVE-2024-51366An arbitrary file upload vulnerability in the component \Roaming\Omega ...check
CVE-2024-51367An arbitrary file upload vulnerability in the component \Users\usernam ...check
CVE-2024-51481Nix is a package manager for Linux and other Unix systems. On macOS, b ...check
CVE-2024-52309SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S ...check
CVE-2024-52595lxml_html_clean is a project for HTML cleaning functionalities copied ...check
CVE-2024-52799Argo Workflows Chart is used to set up argo and its needed dependencie ...check
CVE-2024-52803LLama Factory enables fine-tuning of large language models. A critical ...check
CVE-2024-53425A heap-buffer-overflow vulnerability was discovered in the SkipSpacesA ...check
CVE-2024-53426A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 ...check
CVE-2024-53429Open62541 v1.4.6 is has an assertion failure in fuzz_binary_decode, wh ...check
CVE-2024-53432While parsing certain malformed PLY files, PCL version 1.14.1 crashes ...check

Search for package or bug name: Reporting problems