PT-2023-20449 · Teler-Waf · Teler-Waf

Name of the Vulnerable Software and Affected Versions: teler-waf versions prior to 0.2.0 Description: teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. The issue allows an attacker to execute arbitrary JavaScript code on the victim's...

CVE-2022-44310

In Development IL ecdh before 0.2.0, an attacker can send an invalid point not on the curve as the public key, and obtain the derived shared secret...

CVE-2022-25992

Insecure inherited permissions in the IntelR oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12848 · Intel · Oneapi Toolkits Oneapi-Cli

Name of the Vulnerable Software and Affected Versions: oneAPI Toolkits oneapi-cli versions prior to 0.2.0 Description: The issue is related to insecure inherited permissions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

Design/Logic Flaw

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

PT-2022-8301 · Unknown · Morgawr Muon

Name of the Vulnerable Software and Affected Versions: Morgawr Muon version 0.1.1 Description: A vulnerability has been found in Morgawr Muon, classified as problematic. It affects an unknown functionality of the file src/muon/handler.clj, leading to insufficiently random values. The attack can b...

decode-uri-component 输入验证错误漏洞

decode-uri-component is a decode URI component by the individual developer Sam Verschueren. A security vulnerability exists in decode-uri-component version 0.2.0, which stems from insufficient validation of user input...

CVE-2022-43148

rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtftools.h...

rtf2html 缓冲区错误漏洞

rtf2html is an RTF to HTML converter by Valentin Lavrinenko, a personal developer. A security vulnerability exists in rtf2html version v0.2.0, which stems from a heap-based buffer overflow in /rtf2html/. /rtftools.h suffers from a heap-based buffer overflow...

CVE-2022-39221

McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program,...

PT-2022-24821 · Unknown · Mcwebserver Minecraft Mod

Name of the Vulnerable Software and Affected Versions: McWebserver Minecraft Mod for Fabric and Quilt versions 0.1.2.1 and earlier McWebserver Minecraft Mod for Forge versions 0.1.1 and earlier Description: The McWebserver mod runs a simple HTTP server alongside the Minecraft server in separate...

[SECURITY] Fedora 36 Update: golang-github-projectdiscovery-chaos-client-0.2.0-3.fc36

Go client to communicate with Chaos DNS API...

PYSEC-2022-43143

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts vanilla and ethereum flavors in the...

[SECURITY] Fedora 36 Update: douceur-0.2.0-14.fc36

A simple CSS parser and inliner in Go...

Design/Logic Flaw

Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not t...

CVE-2022-31071 Octopoller gem published with world-writable files

Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not t...

CVE-2022-31071 Octopoller gem published with world-writable files

Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not t...

CVE-2021-40660

An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...

CVE-2021-40660

An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...