parse-url 信息泄露漏洞

parse-url is an advanced url parser with git url support. An information disclosure vulnerability exists in versions of parse-url prior to 7.0.0, which can be exploited by attackers to expose sensitive information to unauthorized participants...

parse-url 跨站脚本漏洞

parse-url is an advanced url parser with git url support. A cross-site scripting vulnerability exists in parse-url versions prior to 7.0.0, which stems from the ability to run malicious JS code using ASCII characters starting with and all special escape characters starting with Unicode, which can...

CVE-2022-0722: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...

PT-2022-15279

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository ionicabizau/parse-url. Recommendations For versions prior to 7.0.0, update to version 7.0.0 or later to resolve t...

CVE-2022-2218: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

parse-url 代码问题漏洞

parse-url is an advanced url parser with git url support from the individual developer Ionică Bizău. A code issue vulnerability exists in parse-url versions prior to 7.0.0, which stems from improper handling of usernames and passwords, undetected hostnames, and can be exploited by an attacker to...

PT-2022-37057

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 2 crash type has been identified. The crash state involves several functions, including AK::HashTable, false::try lookup for,...

CVE-2022-31089: Use of Incorrectly-Resolved Name or Reference

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability...

PT-2022-13388

Name of the Vulnerable Software and Affected Versions parse-url versions prior to 7.0.0 Description The issue concerns exposure of sensitive information to an unauthorized actor. This occurs due to hostname confusion in the GitHub repository ionicabizau/parse-url. Recommendations For versions pri...

PT-2022-15277 · Parse-Url · Url-Parse

Name of the Vulnerable Software and Affected Versions: parse-url versions prior to 7.0.0 Description: The issue is related to Server-Side Request Forgery SSRF in the parse-url repository. This allows for the exploitation of parse URL to read local files. Recommendations: For versions prior to...

PT-2022-37055

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read 4 crash has been reported, involving the functions read blob signed, parse signature type. Recommendations At the moment, there...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. It contains an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to it...

DEBIAN-CVE-2022-33070

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

ALPINE-CVE-2022-33070

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2022-33070

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

protobuf-c 安全漏洞

protobuf-c is a protocol buffer implementation based on C. A denial of service vulnerability exists in Protobuf-c v1.4.0, which stems from a function parsetagandwiretype in protobuf-c/protobuf-c.c that contains an invalid arithmetic shift. An attacker could exploit this vulnerability to cause a...

PT-2022-3438

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the parse cmd address function of the Vim text editor. This can be exploited by a remote attacker to execute arbitrary code. Recommendations For...

PT-2022-5386

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.10.3 Description An issue was discovered in libxml2 where certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be...

PT-2022-5387

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.10.3 Description The issue is related to an integer overflow in the xmlParseNameComplex function of the libxml2 library when parsing XML documents with the XML PARSE HUGE parser option enabled. This can lead to an...

Denial Of Service (DoS)

parse-server is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions via certain types of invalid file requests which are not handled properly...