177 matches found
CVE-2025-48364
CVE-2025-48364 is a Server-Side Request Forgery (SSRF) vulnerability impacting the WordPress rajce plugin (vEnCa-X) versions n/a through 0.4.2. According to the sources, the issue affects rajce up to 0.4.2 and has a CVSS v3.1 base score of 4.9 (Network, High attack complexity, Low privileges, No ...
PT-2025-35032 · Rajce · Rajce
Name of the Vulnerable Software and Affected Versions: rajce versions n/a through 0.4.2 Description: A Server-Side Request Forgery SSRF vulnerability exists in vEnCa-X rajce, allowing Server Side Request Forgery. Recommendations: At the moment, there is no information about a newer version that...
Linux Distros Unpatched Vulnerability : CVE-2017-11664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WMSetupMidiEvent function in internalmidi.c:2122 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid...
Linux Distros Unpatched Vulnerability : CVE-2017-11661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid...
WordPress rajce plugin <= 0.4.2 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin rajce versions = 0.4.2...
CVE-2011-10009
S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending...
CVE-2011-10009
Affected software: S40 CMS v0.4.2. Vulnerability: path traversal via the index.php page handler; the p parameter is not properly sanitized, enabling traversal of the file system and access to arbitrary files outside the web root. Impact: remote, unauthenticated exploitation leading to potential e...
PT-2025-33078 · S40 Cms · S40 Cms
Name of the Vulnerable Software and Affected Versions: S40 CMS version 0.4.2 Description: S40 CMS version 0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary fil...
S40 CMS 安全漏洞
S40 CMS is a content management system by Osirys Personal Developers. A security vulnerability exists in S40 CMS version 0.4.2, which stems from improper cleaning of the parameter p in the index.php page handler, which could lead to a path traversal attack...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sccache (SUSE-SU-2025:02768-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02768-1 advisory. - Update to version 0.4.24: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycod...
Security update for sccache
This update for sccache fixes the following issues: Update to version 0.4.24: CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. bsc1243868 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2025:02768-1 Security update for sccache
This update for sccache fixes the following issues: - Update to version 0.4.24: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. bsc1243868...
Security update for sccache
This update for sccache fixes the following issues: Update to version 0.4.24: CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. bsc1243868 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2025:02587-1 Security update for sccache
This update for sccache fixes the following issues: - Update to version 0.4.24: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. bsc1243868...
CVE-2025-6739
The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2025-6739 WPQuiz <= 0.4.2 - Authenticated (Contributor+) SQL Injection
The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
Insufficient Control Flow Management
Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through the slice function. An attacker can bypass the evaluation of side effects in the start argument when the length argument is set to 0,...
Insufficient Control Flow Management
Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through optimization in the concat function. An attacker can skip evaluation of side effects when the length of an argument provided to the...
CVE-2025-47774
Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, the slice builtin can elide side effects when the output length is 0, and the source bytestring is a builtin msg.data or .code. The reason is that for these source locations, the...
CVE-2025-47774
CVE-2025-47774 relates to Vyper (Pythonic language for the EVM). The issue affects Vyper versions up to and including 0.4.2rc1 where slice() can elide side effects when length is 0 for certain source bytestrings (e.g., msg.data or .code). The root cause is that the length >= 1 check is skipped...