1346 matches found
PT-2023-12595 · Nim +2 · Nim +2
Name of the Vulnerable Software and Affected Versions: Nim versions prior to 1.6.2 NimForum versions prior to 2.2.0 Description: An issue in the RST module of the Nim language stdlib allows the javascript: URI scheme, potentially leading to XSS in some applications. Recommendations: For Nim...
Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
GHSA-4R2F-6FM9-2QGH Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
Design/Logic Flaw
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
ecto 安全漏洞
ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security vulnerability exists in ecto version 2.2.0, which stems from the lack of some kind of protection mechanism...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
GHSA-8PH8-9Q2J-C3RQ nodebatis SQL Injection vulnerability
A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 can address this issue. The name of the patch is 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. It is...
CVE-2018-25066
A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...
Sql injection
A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...
CVE-2018-25066 PeterMu nodebatis sql injection
A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...
PT-2023-10807 · Petermu · Nodebatis
Name of the Vulnerable Software and Affected Versions: PeterMu nodebatis versions up to 2.1.x Description: A critical issue has been found, affecting an unknown function, which leads to sql injection. Upgrading to version 2.2.0 can address this issue. Recommendations: For versions up to 2.1.x,...
PT-2023-15614 · Unknown · Ntpd Driver
Name of the Vulnerable Software and Affected Versions: ntpd driver component versions prior to 1.3.0 ntpd driver component 2.x versions prior to 2.2.0 Description: The issue allows attackers who control the source code of a different node in the same ROS application to change a robot's behavior...
Cross site scripting
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
Fedora 35 : libdxfrw / librecad (2022-3dd3274ae2)
The remote Fedora 35 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-3dd3274ae2 advisory. Update to 2.2.0 RC4. ---- Update librecad to 2.2.0 rc3. Apply fixes to libdxfrw and librecad for CVE-2021-45341, CVE-2021-45342, CVE-2021-45343. Thi...
GHSA-P782-4J23-XQCG Apache Atlas: zip path traversal in import functionality
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0...