PT-2022-18280 · Unknown · Cvrf-Csaf-Converter

Name of the Vulnerable Software and Affected Versions: CVRF-CSAF-Converter versions prior to 1.0.0-rc2 Description: The issue allows for the inclusion of arbitrary local file content into the generated output document due to XML External Entities XXE. This can be exploited by an attacker to...

ASP.NET Core 5-RC1 HTTP Header Injection

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: ASP.NET Core Vendor: Microsoft https://www.microsoft.com CSNC ID: CSNC-2016-006 Subject: HTTP Header Injection Risk: Medium Effect: HTTP Header manipulation Author: Reto Schadler [email protected] Dat...

CVE-2005-3259

Multiple SQL injection vulnerabilities in versatileBulletinBoard vBB 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 login field, 2 "search this thread" feature, 3 "search for posts" feature, 4 "forgot password" feature, 5 list parameter in...