Lucene search
+L

2482 matches found

Cvelist
Cvelist
added 2025/02/13 12:00 a.m.17 views

CVE-2024-53310

A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line TVCC 2.50 when a specially crafted file is passed to the -ff parameter. The vulnerability occurs due to improper handling of file input with overly long characters, leading...

0.00269EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/12 3:31 a.m.19 views

GHSA-Q9W6-CWJ4-GF4P Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS5.9AI score0.00093EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/02/12 3:31 a.m.22 views

Unencrypted transmission in Temporal api-go library

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.5AI score0.00093EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/02/12 1:15 a.m.36 views

CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS0.00093EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/12 12:09 a.m.48 views

CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS0.00093EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/12 12:09 a.m.13 views

CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6AI score
SaveExploits0References5
CVE
CVE
added 2025/02/12 12:09 a.m.2856 views

CVE-2025-1243

Temporal api-go library prior to v1.44.1 fails to send update response data to Data Converter when used in a gRPC proxy during UpdateWorkflowExecution, causing incomplete Data Converter transformations (e.g., encryption) on the update response field. This occurs only when using the UpdateWorkflow...

2CVSS6.2AI score0.00093EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/12 12:09 a.m.15 views

CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1

The Temporal api-go library prior to version 1.44.1 did not send update response information to Data Converter when the proxy package within the api-go module was used in a gRPC proxy prior to transmission. This resulted in information contained within the update response field not having Data...

2CVSS6.2AI score0.00093EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.11 views

api-go 安全漏洞

api-go is an interface program from temporal open source. A security vulnerability exists in api-go versions prior to 1.44.1, which stems from the use of a proxy that does not send update response messages to the Data Converter...

2CVSS6.4AI score0.00093EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2025/02/11 8:00 a.m.156 views

February 11, 2025—KB5052016 (Monthly Rollup)

None None...

8.8CVSS6.8AI score0.24457EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/06 2:52 a.m.11 views

CVE-2025-23427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...

7.1CVSS7.2AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:54 a.m.14 views

CVE-2024-32542

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Organic Themes Bulk Block Converter allows Reflected XSS.This issue affects Bulk Block Converter: from n/a through 1.0.1...

7.1CVSS5.2AI score0.00333EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/30 4:55 p.m.9 views

MAL-2025-658 Malicious code in flashcards-sdk-converter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eddf0b4ef4ccf55d3d894db73987fea2f721ef254833426d112e52eb62005bd Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/30 4:55 p.m.8 views

Malicious code in flashcards-sdk-converter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eddf0b4ef4ccf55d3d894db73987fea2f721ef254833426d112e52eb62005bd Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
NVD
NVD
added 2025/01/24 11:15 a.m.12 views

CVE-2025-23427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...

7.1CVSS0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 10:52 a.m.66 views

CVE-2025-23427

CVE-2025-23427 is a Reflected XSS vulnerability in the WordPress Redux Converter plugin (Redux Converter) affecting versions up to 1.1.3.1. The NVD/Metrics indicate CVSS v3.1: base score 7.1 (HIGH), vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Connected Red Hat/PTSecurity notes confirm the issue...

7.1CVSS7.2AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 10:52 a.m.30 views

CVE-2025-23427 WordPress Redux Converter plugin <= 1.1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Anderson / Team Updraft Redux Converter redux-converter allows Reflected XSS.This issue affects Redux Converter: from n/a through = 1.1.3.1...

7.1CVSS0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.8 views

PT-2025-4873 · Unknown · Dovy Paukstys Redux Converter

Name of the Vulnerable Software and Affected Versions: Dovy Paukstys Redux Converter versions 1.1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attacker...

7.1CVSS9AI score0.0025EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/24 12:00 a.m.8 views

WordPress plugin Redux Converter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.0025EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/21 12:05 p.m.11 views

WordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Term Taxonomy Converter versions = 1.2...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder