SpringBlade SQL Injection Vulnerability

SpringBlade is a set of microservices development platform. A SQL injection vulnerability exists in the DAO/DTO implementation in SpringBlade 2.7.1 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...

Updated weechat packages fix security vulnerabilities

Updated weechat packages fix security vulnerabilities: An issue was discovered in WeeChat before 2.7.1 0.4.0 to 2.7 are affected. A malformed message 352 who can cause a NULL pointer dereference in the callback function, resulting in a crash CVE-2020-9759. An issue was discovered in WeeChat befor...

http-parser security update

2.7.1-8.2 - Do not break ABI with CVE-2019-15605 fix 2.7.1-8.1 - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request smuggling using malformed Transfer-Encoding header...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

Null pointer dereference

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2013-1353

Orange HRM 2.7.1 allows XSS via the vacancy name...

CVE-2013-1353

Orange HRM 2.7.1 allows XSS via the vacancy name...

PT-2020-14317 · Grocy · Grocy

Name of the Vulnerable Software and Affected Versions: Grocy versions = 2.7.1 Description: The issue is related to Cross-Site Scripting that can be exploited via the Create Shopping List module when it is deleted. This problem is also present in other modules, including users, batteries, chores,...

WordPress Swipe Checkout for WooCommerce Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Swipe Checkout for WooCommerce is a payment plugin for e-commerce used in it. A cross-site scripting vulnerability exists in the...

CVE-2015-3907

CodeIgniter Rest Server aka codeigniter-restserver 2.7.1 allows XXE attacks...

Prometheus Cross-Site Scripting Vulnerability

Prometheus is open source software written in the Go language for recording real-time metrics from time-series databases built using the HTTP pull model. A cross-site scripting vulnerability exists in Prometheus versions prior to 2.7.1 that stems from a lack of proper validation of client-side da...

Axway File Transfer Direct Path Traversal Vulnerability

Axway File Transfer Direct is a temporary file exchange solution from Axway France. A directory traversal vulnerability exists in Axway File Transfer Direct version 2.7.1. No details of the vulnerability are available at this time...

Directory traversal

In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring...

CVE-2019-6500

CVE-2019-6500 affects Axway File Transfer Direct 2.7.1 and is an unauthenticated Directory Traversal vulnerability. The issue arises from a crafted HTTP GET request using %2e in place of '.' characters, as demonstrated by a /h2hdocumentation//%2e%2e/ substring. CVSS data reported: CVSSv2 base sco...

DEBIAN-CVE-2017-7467

A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbitrary code in the context of the minicom process...

Design/Logic Flaw

Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. Thi...

CVE-2018-1000509

Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. Thi...

CVE-2018-1000509

CVE-2018-1000509 affects the WordPress Redirection plugin, specifically version 2.7.1 . The vulnerability is a serialization issue in the plugin’s Settings page AJAX, which in certain circumstances can let an attacker with an admin account execute arbitrary code. The flaw is resolved in version 2...

CVE-2018-1000509

Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. Thi...