200 matches found
WP Print Friendly 信息泄露漏洞
WP Print Friendly is a plugin by the individual developer Erick Hitter. It is used to extend the WordPress template system. An information disclosure vulnerability exists in WP-Print-Friendly version 0.5.2, which originates in an unknown section of the file wp-print-friendly.php and is manipulate...
agnes (>=0.3.0, <=0.3.2), agpm_interactions (0.0.1) +408 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)
prettytable-rs CARGO version =0.5.2, =0.3.0, =0.1.0, =0.2.3, =1.0.0, =0.1.0, =0.1.1, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFGM-CHR3-X6PX...
CVE-2020-36628
A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...
PT-2022-9023 · Calsign · Calsign Apde
Name of the Vulnerable Software and Affected Versions: Calsign APDE versions prior to 0.5.2-pre2-alpha Description: A critical issue has been found in the ZIP File Handler component of Calsign APDE, affecting the handleExtract function in the file...
PYSEC-2022-301
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...
Dependency Parser 资源管理错误漏洞
Dependency Parser is a Python dependency file parser open-sourced by pyup.io. A security vulnerability exists in versions of Dependency Parser prior to 0.5.2, which stems from the fact that its dparse contains a regular expression that is vulnerable to regular expression denial of service attacks...
CVE-2022-39280 Regular expression denial of service in dparse
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...
GHSA-8FG9-P83M-X5PQ ReDoS issue in dparse
Impact dparse versions prior to 0.5.1 contain a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. All users parsing index server URLs with dparse are impacted by this vulnerability. Patches The Patch is applied in the 0.5.2 version, all users are recommended to...
PT-2022-24866 · Pypi · Dparse
Name of the Vulnerable Software and Affected Versions: dparse versions prior to 0.5.2 Description: dparse is a parser for Python dependency files. The issue concerns a regular expression that is vulnerable to a Regular Expression Denial of Service ReDoS. All users parsing index server URLs with...
PT-2022-4035 · Jenkins · Jenkins Rhnpush-Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins rhnpush-plugin Plugin versions 0.5.1 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins rhnpush-plugin. This allows attackers with Item/Read permission but without Item/Workspace or...
CVE-2022-1790
The New User Email Set Up WordPress plugin through 0.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
WordPress plugin New User Email Set Up 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2022-17144 · Jenkins · Jenkins Dbcharts Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins dbCharts Plugin versions 0.5.2 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is...
Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information...
CVE-2021-42583
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information...
PT-2021-23641 · Max Mazurov · Maddy
Name of the Vulnerable Software and Affected Versions: Max Mazurov Maddy versions prior to 0.5.2 Description: The issue concerns the use of a broken or risky cryptographic algorithm, which poses an unnecessary risk that may result in the exposure of sensitive information. Recommendations: For...
Max Mazurov Maddy 加密问题漏洞
Max Mazurov Maddy is combinable all-in-one mail server. A security vulnerability exists in the previous version 0.5.2 of Max Mazurov Maddy, which stems from the disclosure of sensitive information in the application...
Znote Cross-Site Scripting Vulnerability
Znote App is a note taking application designed to provide users with secure file protection. A cross-site scripting vulnerability exists in Znote version 0.5.2. An attacker can exploit the vulnerability by inserting a payload to cause code execution...
