86 matches found
openSUSE: Security Advisory for syncthing (openSUSE-SU-2021:0688-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-21404
CVE-2021-21404 affects Syncthing up to version 1.15.0, where the relay server and Syncthing itself can crash if a malformed relay protocol message with a negative length is received. The issue can be triggered by a crafted message from a malicious relay or by sending a relay message with a negati...
Sql injection
Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...
CVE-2018-20713
Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...
CVE-2018-20713
CVE-2018-20713 concerns Shopware prior to version 5.4.3, which is vulnerable to a SQL injection by remote authenticated users (SW-21404). The root cause, as detailed by multiple sources, is insufficient input validation in critical parameters (e.g., newName , defaultValue , table , name ), allowi...
