6 matches found
CVE-2020-21133
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn=dovalid...
CVE-2022-4966
CVE-2022-4966 affects sequentech admin-console up to version 6.1.7, impacting the Election Description Handler component. The issue enables cross-site scripting and can be exploited remotely. A fix is available in version 7.0.0-beta.1 (patch 0043a6b1e6e0f5abc9557e73f9ffc524fc5d609d); upgrading th...
1st (>=0.1.0 <=0.1.45), 4paradigm_robot_service (>=0.0.1 <=0.0.16) +6380 more potentially affected by CVE-2023-45133 via @babel/traverse (>=7.0.0-beta.31 <=7.23.0)
@babel/traverse NPM version =7.0.0-beta.31, =0.1.0, =0.0.1, =0.0.0, =0.0.2, =0.0.1, =0.6.0, =0.0.1, =0.0.2, =0.0.0-manual.7283bbad, =0.28.1, =0.37.0-beta-5 - @accio-cms/server =0.0.6 - @acentswap/ace-sdk =10.4.0 and more Source cves: CVE-2023-45133 Source advisory: OSV:GHSA-67HX-6X53-JW92...
GHSA-CXG2-49RQ-8GCR Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service application outage or obtain sensitive information via a crafted header that interferes with "recycling...
CVE-2020-21133
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...
tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service application outage or obtain sensitive information via a crafted header that interferes with "recycling...