135 matches found
PT-2022-11318 · Unknown · Lemonldap::Ng
Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG version 2.0.13 Description: An issue was discovered in LemonLDAP::NG when using the RESTServer plug-in for a REST password validation service and the Kerberos authentication method combined with another method using the...
CVE-2021-29472
Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if hg/Mercurial is installed on the system. The impact to...
Dovecot 2.0.x < 2.0.13 Directory Traversal Vulnerability
Dovecot is prone to a directory traversal vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
jc21 Nginx Proxy Manager Path Traversal Vulnerability
jc21 Nginx Proxy Manager is a graphical user interface for managing Nginx servers. A path traversal vulnerability exists in versions of jc21 Nginx Proxy Manager prior to 2.0.13, which can be exploited by an attacker to access locations outside of a restricted directory...
Directory traversal
jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal...
CVE-2019-15517
jc21 Nginx Proxy Manager
GHSA-JGMR-WRWX-MGFJ Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA
This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ?startingWith?, ?endingWith? or ?containing? could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...
Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA
This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ?startingWith?, ?endingWith? or ?containing? could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...
Input validation
This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...
CVE-2019-3797
This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...
LinuxMagic MagicSpam-Plesk Extended Insecure File Permissions Vulnerability
LinuxMagic MagicSpam-Plesk extension is an anti-spam extension from LinuxMagic Canada. A security vulnerability exists in LinuxMagic MagicSpam-Plesk extension version 2.0.13. The vulnerability can be exploited by a local attacker to obtain mailbox names by reading /var/log/magicspam/mslog...
CVE-2017-14229
There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...
CVE-2017-14229
There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...
Design/Logic Flaw
There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...
CVE-2017-14229
There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...
CVE-2017-14229
CVE-2017-14229 affects Jasper 2.0.13: an infinite loop in jpc_dec_tileinit (jpc/jpc_dec.c) enables remote denial of service. The connected sources corroborate the same description across multiple feeds (NVD/Red Hat/CNVD/osv/etc.), listing the vulnerable function and the infinite-loop trigger as t...
Wireshark 'GPRS' DoS Vulnerability - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark 'GPRS' DoS Vulnerability - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Updated wireshark packages fix security vulnerabilities
The wireshark package has been updated to version 2.0.13, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details...