EUVD-2022-25253

Malicious code in bioql PyPI...

EUVD-2024-39636

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2015-8697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stalin 0.11-5 allows local users to write to arbitrary files. CVE-2015-8697 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2024-42476

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the state parameter to prevent cross-site request forgery CSRF attacks where a resource owner might have their session associated with protected resources belonging to an attacker. Whe...

CVE-2022-1907

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...

CVE-2022-1908

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...

CVE-2025-25160

Cross-Site Request Forgery CSRF vulnerability in Mark Barnes Style Tweaker style-tweaker allows Stored XSS.This issue affects Style Tweaker: from n/a through = 0.11...

WordPress plugin Style Tweaker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Style Tweaker plugin <= 0.11 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Style Tweaker versions = 0.11...

CVE-2024-42476 oauth CSRF vulnerability

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the state parameter to prevent cross-site request forgery CSRF attacks where a resource owner might have their session associated with protected resources belonging to an attacker. Whe...

CVE-2024-42475

The CVE describes the nim OAuth library prior to 0.11 having insecure generateState entropy in the state values, enabling potential CSRF with a user. The root cause is that generateState did not use a cryptographically secure generator, producing insufficient entropy (less than 128 bits). Version...

[SECURITY] Fedora 40 Update: snip-0.11-25.fc40

An Ant task designed to help with the single-sourcing of program documentatio n...

[SECURITY] Fedora 40 Update: rundoc-0.11-25.fc40

An Ant task designed to help with the single-sourcing of program documentatio n...

CVE-2023-43906

Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting XSS vulnerability...

CVE-2023-43906

Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting XSS vulnerability...

CVE-2023-43906

Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting XSS vulnerability...

OffiDocs Xolo CMS Cross-Site Scripting Vulnerability

OffiDocs Xolo CMS is a content management system from OffiDocs, Inc. A security vulnerability exists in OffiDocs Xolo CMS version v0.11, which stems from the inclusion of a Reflected Cross-Site Scripting XSS vulnerability...

CVE-2023-45138 Change Request Application vulnerable to XSS and remote code execution through change request title

Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and prior to version 1.9.2, it's possible for a user without any specific right to perform script injection and remote code execution just by inserting an...

SUSE CVE-2023-36274

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...

Memory Out-of-Bounds Read Vulnerability in Libmobi Versions Prior to 0.11

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A memory out-of-bounds read vulnerability exists in Libmobi versions prior to 0.11, which can be exploited by attackers to obtain sensitive information...