AZL-66918 CVE-2023-50572 affecting package jline 2.14.6-1

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2018-05183)

Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. Multiple cross-site scripting vulnerabilities exist in Sonatype Nexus Repository Manager version 2.x prior to 2.14.6. A remote attacker can exploit the vulnerabilities to inject arbitrary web script or HTML using a variety ...

CVE-2016-10321

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks...

CVE-2016-10321

web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks...

CVE-2016-10321

CVE-2016-10321 affects web2py up to version 2.14.6, where the system does not properly check if a host is denied before verifying passwords, enabling remote brute-force attempts. The vulnerability is documented across multiple sources (e.g., GHSA-GV85-WGXC-VC56, USN-4030-1, OSV, and NVD entry). I...

Information disclosure

Crafty Syntax Live Help CSLH 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

Fedora 8 : glib2-2.14.6-1.fc8 (2008-1533)

PCRE 7.6 fixed following bug: A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow. The GLib release 2.14.6 updates the included copy of PCRE to version 7.6. Note that Tenable Network Security has extract...

Libgtop2 Library - Local Buffer Overflow

source: https://www.securityfocus.com/bid/22054/info The 'libgtop2' library is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying into an insufficiently sized memory buffer. An attacker may exploit this issue by enticing...

CVE-2006-4635

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...