CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

PT-2021-4109 · Pypi +2 · Pydantic +2

Name of the Vulnerable Software and Affected Versions: Pydantic versions prior to v1.6.2 Pydantic versions prior to v1.7.4 Pydantic versions prior to v1.8.2 Description: The issue is related to the incorrect handling of 'infinity', 'inf', and float'inf' values in date fields, causing validation t...

CVE-2019-19852

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4...

Cross site scripting

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4...

CVE-2019-19852

An XSS injection vulnerability exists in Sangoma FreePBX and PBXact (13–15) within the Call Event Logging (cel) module, exploitable via the admin/config.php?display=cel page using date fields. Affected versions include cel up to 13.0.26.9, 14.x up to 14.0.2.14, and 15.x up to 15.0.15.4. The root ...

CVE-2019-19852

An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Call Event Logging report screen in the cel module at the admin/config.php?display=cel URI via date fields. This affects cel through 13.0.26.9, 14.x through 14.0.2.14, and 15.x through 15.0.15.4...

Ubuntu Update for evolution vulnerabilities USN-615-1

Ubuntu Update for Linux kernel vulnerabilities USN-615-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6151.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerabilities USN-615-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM Lotus Domino Server time/date Fields Remote Overflow

According to its banner, the remote host is running a version of Lotus Domino Server that is prone to a buffer overflow attack triggered by submitting a POST request with large amounts of data for certain date / time fields. A remote attacker can reportedly exploit this issue to crash the web...

CVE-2005-1101

Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via large amounts of data in certain 1 time or 2 date fields...

CVE-2005-1101

Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via large amounts of data in certain 1 time or 2 date fields...