16126 matches found
Information Exposure
Overview org.apache.maven.scm:maven-scm-providers-git is a SCM Provider implementation for Git Affected versions of this package are vulnerable to Information Exposure due to improper handling of passwords in different components. When a git password contains special characters, a discrepancy in...
JetBrains TeamCity Information Disclosure
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to the disclosure of information through registration files due to incorrect encoding based on the base64 standard. Exploiting this vulnerability can allow a malicious...
CVE-2024-7407
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transforme...
CVE-2025-30372
Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. "searchcontroller.php" does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in...
CVE-2024-7407
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are...
CVE-2024-7407 Weak password encoding in Streamsoft Prestiż
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are...
CVE-2024-7407
CVE-2024-7407 concerns Streamsoft Prestiż, where a custom password encoding algorithm allows decoding of stored passwords from encoded forms under observer-informed conditions. The vulnerable element is the password encoding/transform process in the application’s database storage. The impact, as ...
CVE-2024-7407 Weak password encoding in Streamsoft Prestiż
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are...
encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).
...
CVE-2024-7407: Weak Encoding for Password
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are...
PT-2025-13511
Name of the Vulnerable Software and Affected Versions Streamsoft Prestiż versions prior to 18.2.377 Description The issue concerns the use of a custom password encoding algorithm in the software, which allows for straightforward decoding of passwords using their encoded forms stored in the...
HDF5 security vulnerabilities
HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Faddrencodelen function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...
Streamsoft Prestiz security vulnerabilities
Streamsoft Prestiz is an ERP system for the plastics industry from Streamsoft. A security vulnerability exists in Streamsoft Prestiz that stems from the use of a custom password encoding algorithm, which could result in passwords being easily decoded...
CVE-2025-30372: Improper Neutralization of Special Elements used in an SQL Command
Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. searchcontroller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potentia...
PT-2025-13545
Name of the Vulnerable Software and Affected Versions Emlog Pro versions pro-2.5.7 through pro-2.5.8 Description Emlog is an open source website building system. The issue arises from the search controller.php file not using addslashes after urldecode, allowing the preceding addslashes to be...
OpenJPEG Buffer Overflow
The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Apache Subversion mod_dav_svn DoS
The vulnerability of the moddavsvn function in Apache Subversion relates to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
Improper Encoding or Escaping of Output
Overview django-tomselect is a Django autocomplete widgets and views using Tom Select Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in form widget input, including the labelfield parameter. An attacker can hide the contents between tags in code from...
ALPINE-CVE-2025-27837
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...