CVE-2016-1000022

creationtimestamp| type| source ---|---|--- 2024-03-16 09:22:07+00:00| seen| https://t.me/ctinow/209430...

CVE-2016-1000022

CVE-2016-1000022 is a duplicate of CVE-2016-10539. Connected documents describe a Regular Expression Denial of Service in the Node.js modules negotiator (and related Minimatch patterns) triggered by crafted Accept-Language strings. Affected versions include negotiator up to 0.6.0; remediation is ...

CVE-2016-1000022

...

CVE-2019-1000022

Taoensso Sente versions prior to 1.14.0 contain a CSRF vulnerability in the WebSocket handshake endpoint that can enable a CSRF attack and possibly leak an anti-CSRF token. Affected component: Sente WebSocket handshake. Root cause: missing CSRF protections during handshake. Impact per sources: po...

CVE-2018-1000022

CVE-2018-1000022 affects Electrum Bitcoin Wallet versions prior to 3.0.5, where a Missing Authorization vulnerability in the JSONRPC interface could lead to bitcoin theft if the wallet is not password protected. The issue is exploitable when a user visits a page with specially crafted JavaScript....

CVE-2018-1000022

Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password protected. This attack appear to be exploitable via The victim must visit a...

Code injection

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering 1 social-engineering attacks in which a user pastes code that they do not understand and 2 code pasted by a physically proximate attacker at an unattended workstation, which makes...

CVE-2017-1000022

LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation...

CVE-2017-1000022

The CVE-2017-1000022 entry concerns LogicalDoc Community Edition 7.5.3 and earlier, where an incorrect access control issue can lead to privilege escalation. Public references across NVD and CNVD describe the vulnerability as an elevation of privileges due to improper rights management within the...