DOMPDF Remote Code Execution Vulnerability

DOMPDF is a converter to convert HTML to PDF. A remote code execution vulnerability exists in DOMPDF versions prior to 0.6.2. No details of the vulnerability are provided at this time...

DOMPDF Information Disclosure Vulnerability

DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...

PT-2020-7695 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows information disclosure. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

PT-2020-7696 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows for a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

CVE-2006-4245

archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition...

CVE-2006-4245

CVE-2006-4245 affects archivemail 0.6.2, which insecurely uses temporary files, creating a possible race condition. Fixed in later packages (e.g., archivemail-0.9.0-9.2 on openSUSE GA media); upgrade recommended. If upgrading not available, consult vendor advisories. Exploitation status not provi...

UBUNTU-CVE-2018-20989

An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic...

WordPress wp-code-highlightjs plugin cross-site request forgery vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-code-highlightjs plugin is a highlighting plugin used in it. A cross-site request forgery vulnerability exists in WordPre...

Creatiwity wityCMS cross-site scripting vulnerability (CNVD-2019-19292)

Creatiwity wityCMS is a lightweight PHP-based content management system CMS. A cross-site scripting vulnerability exists in the utilisateur menu in Creatiwity wityCMS version 0.6.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...

Creatiwity wityCMS SQL Injection Vulnerability

Creatiwity wityCMS is a lightweight PHP-based content management system CMS. A SQL injection vulnerability exists in Creatiwity wityCMS version 0.6.2. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit thi...

CVE-2018-16251

A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...

Cross site scripting

The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters...

Design/Logic Flaw

A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...

CVE-2019-6292

An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote...

Buffer Overflow

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Buffer Overflow. An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem...

DEBIAN-CVE-2019-6292

An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote...

AZL-7009 CVE-2019-6292 affecting package yaml-cpp for versions less than 0.6.2-6

An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote...

PT-2019-18079 · Libyaml +2 · Yaml-Cpp +2

Name of the Vulnerable Software and Affected Versions: yaml-cpp aka LibYaml-C++ version 0.6.2 Description: An issue in singledocparser.cpp causes a stack exhaustion problem due to recursive stack frames in functions like HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, and...

DEBIAN-CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

UBUNTU-CVE-2019-6285

The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...