32 matches found
CVE-2026-12200 Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow
A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack can be...
CVE-2013-10075
The connected EUVD-2013-7294 entry confirms a vulnerability in Apache::Session for Perl (versions up to 1.94). The issue arises when re-creating deleted sessions via the File and DB_File stores, allowing a session that should have been deleted to be revived and potentially reusing data intended f...
Linux Distros Unpatched Vulnerability : CVE-2013-10075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile...
Apache::Session::Generate::MD5 安全漏洞
Apache::Session::Generate::MD5 is a session management module provided by the Apache Foundation. Versions of Apache::Session::Generate::MD5 prior to 1.94 contained security vulnerabilities. These vulnerabilities stemmed from the recreation of deleted sessions, which could lead to the restoration ...
UBUNTU-CVE-2026-5081
Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...
CVE-2026-5081
Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...
CVE-2016-20038
Removed by vendor...
yTree 缓冲区错误漏洞
yTree is a terminal-based file management and directory browsing tool developed by Werner Bregulla. Versions 1.94 to 1.1 of yTree contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which could allow local attackers to execute arbitrary code by providing...
OPENSUSE-SU-2026:10384-1 cargo1.94-1.94.0-2.1 on GA media
These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...
Apache::Session::Generate::MD5 安全漏洞
Apache::Session::Generate::MD5 is a session management module provided by the Apache Foundation. Versions of Apache::Session::Generate::MD5 prior to 1.94 contained security vulnerabilities. These vulnerabilities stemmed from the use of insecure random number generators for generating session IDs,...
CVE-2026-24042 Appsmith public apps can execute unpublished actions (viewMode confusion)
Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users to execute unpublished edit-mode actions by sending viewMode=false or omitting it to POST /api/v1/actions/execute. This bypasses the...
PT-2026-3916
Name of the Vulnerable Software and Affected Versions Appsmith versions 1.94 and below Description Appsmith is a platform used to build admin panels, internal tools, and dashboards. Publicly accessible applications in affected versions allow unauthenticated users to execute unpublished actions...
Linux Distros Unpatched Vulnerability : CVE-2023-45129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impac...
WordPress Advanced Woo Labels Plugin <= 1.93 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Woo Labels Type Plugin Vulnerable versions = 1.93 Fixed in 1.94 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35675 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0ad89d9224a2 Credits savphill Required privilege...
Ritlabs TinyWeb Server 安全漏洞
Ritlabs TinyWeb Server is a small but full-featured Web server from Ritlabs. A security vulnerability exists in Ritlabs TinyWeb Server version 1.94, which stems from the fact that incorrect manipulation of the input %0D%0A can lead to crlf injection...
TinyWeb Security Vulnerability
TinyWeb is a simple and lightweight HTTP server from the individual developer Konstantin Belyalov. A security vulnerability exists in TinyWeb version 1.94 and earlier, which originates from a denial of service that allows an unauthenticated, remote attacker to send too large an element in a reque...
SUSE CVE-2023-46009
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...
CVE-2023-46009
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...
DEBIAN-CVE-2023-46009
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...
CVE-2023-46009
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...