Teeworlds Input Validation Error Vulnerability

Teeworlds is a multiplayer online shooter. An input validation error vulnerability exists in versions of Teeworlds prior to 0.7.4. An attacker can exploit this vulnerability to execute arbitrary code on the system...

UBUNTU-CVE-2019-20787

Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size...

PT-2020-10760 · Teeworlds +2 · Teeworlds +2

Name of the Vulnerable Software and Affected Versions: Teeworlds versions prior to 0.7.4 Description: The issue is related to an integer overflow that occurs when computing a tilemap size. Recommendations: For versions prior to 0.7.4, update to version 0.7.4 or later to resolve the issue...

GHSA-3JQW-VV45-MJHH XSS/Script injection vulnerability in matestack

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

DEBIAN-CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

PYSEC-2019-202

python-rply before 0.7.4 insecurely creates temporary files...

Airbnb Knowledge Repo Cross-Site Scripting Vulnerability

Airbnb Knowledge Repo is a suite of knowledge sharing platforms. The platform supports features such as data storage and utility management. A cross-site scripting vulnerability exists in Airbnb Knowledge Repo version 0.7.4. A remote attacker can exploit this vulnerability to inject arbitrary web...

UBUNTU-CVE-2018-1000159

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ctcheckcbcmacandpad; line "endpos = datalen - 1 - mac.digestsize" that c...

CVE-2018-9119

An attacker with physical access to a BrilliantTS FUZE card MCU firmware 0.1.73, BLE firmware 0.7.4 can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool...

PT-2018-18867 · Brilliantts · Brilliantts Fuze Card

Name of the Vulnerable Software and Affected Versions: BrilliantTS FUZE card MCU firmware 0.1.73, BLE firmware 0.7.4 Description: The issue allows an attacker with physical access to unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth, as no authentication...

DEBIAN-CVE-2018-5345

A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file...

UBUNTU-CVE-2018-5345

A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file...

Mistune Cross-Site Scripting Vulnerability

Mistune is a Python based parser with renderer functionality. A cross-site scripting vulnerability exists in the mistune.py file in Mistune version 0.7.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

UBUNTU-CVE-2017-15612

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...

Design/Logic Flaw

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...

CVE-2017-15612

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...

PT-2017-14131 · Mistune · Mistune

Name of the Vulnerable Software and Affected Versions: Mistune version 0.7.4 Description: The issue allows for XSS attacks through unexpected newlines or crafted email addresses, related to the escape and autolink functions. Recommendations: For Mistune version 0.7.4, consider updating to a newer...

CVE-2017-7911

A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution...

CVE-2017-7911

A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution...

Code injection

A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which may allow remote code execution...