In WordPress version 6.5.5 a medium severity vulnerability CVE-2024-6306 was detected. This vulnerability allows attackers to include arbitrary HTML Files on sites running Windows. There is no fix for this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6306/.
Read more CMS
In pgAdmin version 8.8 and earlier a high severity vulnerability CVE-2024-6238 was detected. The vulnerability involves installation directory permissions on Debian and RHEL 8 platforms, allowing attackers to gain unauthorized access. To fix this issue, users should update to version 8.9 to fix this issue. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6238.
Read more Database
In Django version 3.15.2 a medium severity vulnerability CVE-2024-21520 was detected. This vulnerability allows attackers to access sensitive data via scripting. There is no fix to this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-21520/.
Read more Application Development
In GitLab versions 16.11 to 17.1.1 a high severity vulnerability CVE-2024-6323 was detected. This vulnerability allows attackers to leak the content of a private repository in a public project. There is no fix to this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-6323/.
Read more Developer Tools
In GitLab CE/EE versions from 15.8 onwards a critical security vulnerability CVE-2024-5655 was detected. Attackers can trigger a pipeline as another user under certain circumstances. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-5655.
Read more Developer Tools
In GitLab CE/EE, all versions starting from 16.10 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, a medium severity vulnerability CVE-2024-5430 was detected. This issue allows a project maintainer to delete the merge request approval policy via GraphQL. There is no fix for this yet. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-5430.
Read more Developer Tools
In Harbor versions 2.8.x before 2.8.4, 2.9.x before 2.9.2, and 2.10.x before 2.10.0, a medium severity vulnerability CVE-2024-22244 was detected. This vulnerability allows attackers to redirect users to malicious websites. To fix this problem, users should upgrade Harbor to versions 2.8.5, 2.9.3, or 2.10.1. For more details, visit Aqua Security’s advisory.
Read more Developer Tools
In Spring Cloud Data Flow a high severity vulnerability CVE-2024-22263 was detected. This flaw in the Skipper server allows hackers to upload harmful files, which can compromise the server. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-22263/.
Read more Application Development
In Airflow version 2.9.1 a low severity vulnerability CVE-2024-25142 was detected. This vulnerability allows attackers to get access to sensitive data. To address this issue, users must update version 2.9.2. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-25142/.
Read more Data Analytics