EUVD-2022-1631

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-1341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c. CVE-2022-1341 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2018-20989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic. CVE-2018-20989 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2018-20573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and applicati...

Linux Distros Unpatched Vulnerability : CVE-2019-6285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and...

CVE-2023-43809

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...

CVE-2023-38505

DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be waiting for a handshake, and will stay this way indefinitel...

CVE-2023-51534

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content allows Stored XSS.This issue affects Brave – Create Popup, Optins, Lead Generation, Survey, Sticky...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

PrivateGPT 安全漏洞

PrivateGPT is an AI project open-sourced by Zylon. A security vulnerability exists in PrivateGPT version 0.6.2 and earlier, which stems from improper cross-domain policy due to misuse of the parameter alloworigins in the file settings.yaml...

CVE-2025-39515 WordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tnomi Attendance Manager attendance-manager allows Stored XSS.This issue affects Attendance Manager: from n/a through = 0.6.2...

PT-2025-14074 · Unknown · Rj Quickcharts

Name of the Vulnerable Software and Affected Versions: randyjensen RJ Quickcharts versions 0.6.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. To...

CVE-2025-30615

Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2025-30615

CVE-2025-30615 is a Cross-Site Request Forgery leading to Remote Code Execution in the WordPress plugin WP e-Commerce Style Email . The Wordfence vulnerability list documents a CSRF-to-RCE chain for this plugin, affecting version range from unknown/na to 0.6.2, with a CVSSv3.1 base score of 9.6 (...

CVE-2025-30615 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability

CSRF to Remote Code Execution vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP e-Commerce Style Email versions = 0.6.2...

WordPress plugin WP e-Commerce Style Email 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Deserialization of Untrusted Data

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the makehandlercoro function used by the async RPC server for communication between nodes, which uses pickle fo...

CVE-2024-7764

Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection when generate_sql calls extract_sql on the LLM response. An attacker can insert a semicolon between a data field and their own command, causing extract_sql to remove LLM-generated SQL and execute the attacker’s command ...

CVE-2024-12063

CVE-2024-12063 affects imartinez/privategpt v0.6.2. The vulnerability is a DoS in the file upload feature caused by improper handling of form-data with an excessively large filename, which can overwhelm the server and render it unavailable to legitimate users. The exploitation details are not pro...