396 matches found
PT-2023-9456 · Google +10 · Go +10
Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.20.8 dev-go/go-tools versions prior to 0.3.0 Description: The issue is related to the html/template package in the Go programming language, which does not properly handle HTML-like comment tokens or hashbang "!" comment...
GHSA-5824-CM3X-3C38 Vyper has incorrectly allocated named re-entrancy locks
Impact In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in contracts compiled with the susceptible versions. A specific set of...
Xxe
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in...
PYSEC-2023-142
Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in...
Vyper Security Vulnerability
Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper that stems from the presence of an improperly assigned named reentrant lock. Affected products and versions: Vyper version 0.2.15, 0.2.16, 0.3.0...
PT-2023-23380 · Pypi · Pipreqs
Name of the Vulnerable Software and Affected Versions: pipreqs versions 0.3.0 through 0.4.11 Description: A dependency confusion in pipreqs allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server. Recommendations: For pipreqs versions 0.3.0...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
Directory traversal
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
CVE-2023-34843: Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request (Local File Inclusion). Impact: unauthorized access to sensitive files. Mitigation: upgrade to the latest version as indicated by the affected templates; no exploitation details are provided beyond ...
CVE-2023-31847
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
Code injection
In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side...
Server side request forgery (ssrf)
davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...
Davinci 安全漏洞
Davinci is edp open source a DVsaaS data visualization service platform. A security vulnerability exists in Davinci version 0.3.0-rc, which originates from the fact that a user can connect to a malicious mysql server via a controlled data source and read arbitrary files on the client side...
PT-2023-23487 · Oracle · Mysql Server
Name of the Vulnerable Software and Affected Versions: davinci version 0.3.0-rc Description: The issue allows a user to connect to a malicious MySQL server after logging in, by controlling the data source. This can lead to reading arbitrary files on the client side. Recommendations: For davinci...
Davinci 代码问题漏洞
Davinci is an edp open source DVsaaS Data Visualization Service platform. A security vulnerability exists in Davinci version 0.3.0-rc, which stems from vulnerability to server request forgery SSRF attacks...
PT-2023-23488 · Davinci · Davinci
Name of the Vulnerable Software and Affected Versions: davinci version 0.3.0-rc Description: The issue is related to Server-side request forgery SSRF. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
