CVE-2020-11712

Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field...

CVE-2020-11712

Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field...

Open redirect

Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field...

CVE-2019-14381

libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot...

Leanify Buffer Overflow Vulnerability (CNVD-2019-18515)

Leanify is a lightweight file lossless compression program. A buffer overflow vulnerability exists in the forms/xml.cpp file in Leanify version 0.4.3. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting ...

CVE-2019-12835

formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xmlmemorywriter::write via characters that require escaping...

CVE-2019-12835

formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xmlmemorywriter::write via characters that require escaping...

CVE-2019-12835

formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xmlmemorywriter::write via characters that require escaping...

CVE-2019-12298

Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write 1024 bytes via a modified input file...

CVE-2019-12298

Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write 1024 bytes via a modified input file...

Out-of-bounds

Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write 1024 bytes via a modified input file...

CVE-2019-12298

The CVE-2019-12298 entry concerns Leanify 0.4.3, where a vulnerability allows remote attackers to trigger an out-of-bounds write of 1024 bytes by supplying a modified input file. The issue is caused by input handling that can write beyond allocated memory, potentially impacting availability and i...

CVE-2019-12298

Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write 1024 bytes via a modified input file...

Exploit for Improper Input Validation in Python Python-Gnupg

Summary It is a simple PoC of Improper Input Validation in py...

PT-2019-1354

Name of the Vulnerable Software and Affected Versions python-gnupg version 0.4.3 Description The issue is related to improper input validation, allowing context-dependent attackers to trick gnupg into decrypting other ciphertext than intended. This can be achieved if the passphrase to gnupg is...

Security update for python-python-gnupg (moderate)

This update for python-python-gnupg to version 0.4.3 fixes the following issues: The following security vulnerabilities were addressed: - Sanitize diagnostic output of the original file name in verbose mode CVE-2018-12020 boo1096745 The following other changes were made: - Add --no-verbose to the...

Downloads Resources over HTTP

Overview Affected versions of go-ipfs-deps insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on...

Multiple Cross-Site-Scripting vulnerabilities in x3cms

Advisory: Multiple Cross-Site-Scripting vulnerabilities in x3cms Advisory ID: INFOSERVE-ADV2011-04 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on x3cms 0.4.3 other versions may also be affected Vendor URL: http://www.x3cms.net/ Vendor Status: Parti...

Fedora 12 : pdfedit-0.4.3-4.fc12 (2010-1377)

Add patch from upstream to fix several security issues in xpdf code: CVE-2009-1188/CVE-2009-3603, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vuln

Exploit for unknown platform in category web applications ========================================================================== Dojo Versions Prior to 1.4.2 Multiple Cross Site Scripting Vulnerabilities ========================================================================== Vulnerable: Th...