76 matches found
DEBIAN-CVE-2022-47021
A null pointer dereference issue was discovered in functions opgetdata and opopen1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts...
CVE-2022-27810
It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode when asserts were enabled. This issue affects Hermes versions prior to v0.12.0...
CVE-2022-25295
This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...
Bottle does not properly limit content-types
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; semi-colon and a Content-Type that would not be accepted, as...
PT-2021-10900 · Gnome +1 · Gedit3 +1
Name of the Vulnerable Software and Affected Versions: gmate version 0.12+bionic Description: The issue is a regular expression denial of service ReDoS vulnerability in the gedit3 plugin. This vulnerability can cause a denial of service. Recommendations: For gmate version 0.12+bionic, at the...
Advisory ROSA-SA-2021-1827
Software: elinks 0.12 OS: Cobalt 7.9 CVE-ID: CVE-2012-6709 CVE-Crit: MEDIUM CVE-DESC: ELinks 0.12 and Twibright Links 2.3 lack SSL certificate validation. CVE-STATUS: Default CVE-REV: Default...
CVE-2021-30458
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a tag, bypassing sanitization steps, and potentially allowing for XSS...
MediaWiki Parsoid 跨站脚本漏洞
MediaWiki Parsoid is a MediaWiki community open source application . Provides a a library that allows conversion back and forth between Wikitext and HTML. A cross-site scripting vulnerability exists in Wikimedia Parsoid versions prior to 0.11.1 and 0.12.x series versions prior to 0.12.2, which ca...
PT-2023-1331 · Xiph +6 · Opusfile +6
Name of the Vulnerable Software and Affected Versions: xiph opusfile versions 0.9 through 0.12 Description: A null pointer dereference issue was discovered in functions op get data and op open1 in opusfile.c. This issue may allow attackers to cause a denial of service or other unspecified impacts...
CVE-2020-15163
Python TUF The Update Framework reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata i.e. by a...
PYSEC-2020-145
Python TUF The Update Framework reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata i.e. by a...
PYSEC-2020-145
Python TUF The Update Framework reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata i.e. by a...
CVE-2020-15163
Python TUF The Update Framework reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata i.e. by a...
PYSEC-2020-51
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12...
CVE-2020-9549
In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document...
CVE-2020-9549
In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document...
PT-2020-20727 · Unknown +2 · Pdfresurrect +2
Name of the Vulnerable Software and Affected Versions: PDFResurrect versions 0.12 through 0.19 Description: The issue arises from an out-of-bounds write in the get type function within pdf.c, which can be triggered by a crafted PDF document. Recommendations: For PDFResurrect versions 0.12 through...
CloudBees Jenkins Brakeman plugin cross-site scripting vulnerability
CloudBees Jenkins is a web application that can use a large number of servers as build slaves to handle larger build/test loads. A cross-site scripting vulnerability exists in the Brakeman plugin in CloudBees Jenkins, version 0.12 and earlier. The vulnerability stems from a lack of proper...
PT-2018-12926 · Gogs · Gogs
Name of the Vulnerable Software and Affected Versions: Gogs versions prior to 0.12 Description: The issue allows remote attackers to redirect users to arbitrary websites, potentially leading to phishing attacks. This is achieved via an initial / substring in the redirect to parameter. The...