CVE-2024-57556

Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component...

OPENSUSE-SU-2024:10572-1 libjavascriptcoregtk-4_0-18-2.14.2-2.1 on GA media

These are all security issues fixed in the libjavascriptcoregtk-40-18-2.14.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11129-1 libopenvswitch-2_14-0-2.14.2-11.3 on GA media

These are all security issues fixed in the libopenvswitch-214-0-2.14.2-11.3 package on the GA media of openSUSE Tumbleweed...

CVAT Security Vulnerabilities

CVAT is an interactive video and image annotation tool for computer vision. A security vulnerability exists in CVAT version 2.2.0 through versions prior to 2.14.3. An attacker exploiting this vulnerability could obtain media files, annotations, settings, and other information from any project,...

[SECURITY] Fedora 39 Update: python-asyncssh-2.14.2-1.fc39

Python 3 library for asynchronous client and server-side SSH communication. It uses the Python asyncio module and implements many SSH protocol features such as the various channels, SFTP, SCP, forwarding, session multiplexing over a connection and more...

CVE-2023-25023

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saleswonder.Biz Webinar ignition plugin = 2.14.2 versions...

[SECURITY] Fedora 35 Update: vultr-cli-2.14.2-2.fc35

Official command line tool for Vultr services...

CVE-2022-0445

The CVE concerns the WordPress Real Cookie Banner plugin (before 2.14.2). The root cause is missing CSRF checks when resetting settings, which can allow a CSRF attacker to trigger a logged-in admin to reset the banner settings. The vulnerability affects the plugin’s settings reset flow and is doc...

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

UBUNTU-CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

PT-2021-18593 · Zend +1 · Zend Framework +1

Name of the Vulnerable Software and Affected Versions: Laminas Project laminas-http versions prior to 2.14.2 Zend Framework version 3.0.0 Description: The issue is related to a deserialization vulnerability that can lead to remote code execution if the content is controllable. This is due to the...

web2py sample Web application command execution vulnerability

web2py is a set of open source Web framework written in Python , it supports rapid development of database-driven Web-based applications . sample web application is one of the Web application template . A security vulnerability exists in the sample web application in versions of web2py prior to...

web2py Information Disclosure Vulnerability

web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A security vulnerability exists in web2py versions prior to 2.14.2. A remote attacker can exploit this vulnerability by sending a direct request to...

Updated git packages fix security vulnerability

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

Git Denial of Service Vulnerability

Git is a free, open source distributed version control system developed by American software developer Linus Torvalds Linus Torvalds. A security vulnerability exists in Git 2.14.2 and earlier versions, which stems from the program's failure to properly handle the tree object layer. A remote...

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

Code injection

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

Apache Camel 'converter/jaxp/XmlConverter.java' Information Disclosure Vulnerability

Apache Camel is based on the known enterprise-class integration model on the open source integration framework . Multiple XML XXE vulnerabilities exist in the XML converter settings within converter/jaxp/XmlConverter.java in Apache Camel versions prior to 2.13.4, 2.14.2 and prior to 2.14.2, which...