7782 matches found
Uncontrolled Resource Consumption in transpile
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
GHSA-7XRJ-F5RP-J55H Uncontrolled Resource Consumption in transpile
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
Parse Server crashes with query parameter
Impact Parse Server crashes when if a query request contains an invalid value for the explain option. This is due to a bug in the MongoDB Node.js driver which throws an exception that Parse Server cannot catch. Patches Upgrade to Parse Server 4.10.3...
Code injection
In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception...
Apache OFBiz安全漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a suite of Java-based web application components and tools. A security vulnerability exists in Apache Ofbiz versions 17.12.01 through 17.12.07, which stems from the...
openSUSE: Security Advisory for openexr (openSUSE-SU-2021:1198-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE 15 Security Update : openexr (openSUSE-SU-2021:1198-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1198-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...
GHSA-WCXC-JF6C-8RX9 Duplicate Advisory: Uncaught Exception in libpulse-binding
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xvcg-2q82-r87j. This link is maintained to preserve external references. Original Description Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB...
Duplicate Advisory: Uncaught Exception in libpulse-binding
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xvcg-2q82-r87j. This link is maintained to preserve external references. Original Description Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB...
OPENSUSE-SU-2021:1198-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...
Division by 0 in inplace operations
Impact An attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0: python import tensorflow as tf tf.rawops.InplaceSubx=,i=-99,-1,-1,v=1,1,1 The implementation has a logic error: it should skip processing if x and v a...
Denial Of Service (DoS)
transpile is vulnerable to denial of service. The vulnerability exists due to failure to sanitize and insecure exception handling in the .to function, causing an application crash...
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
Input validation
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
CVE-2021-23429 Denial of Service (DoS)
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
CVE-2021-23429
CVE-2021-23429 affects the npm package transpile. Concrete details in connected docs show a DoS due to insufficient input sanitization/whitelisting and improper exception handling in the .to() function, with the DoS capable of causing crashes or service unavailability (availability impact HIGH). ...
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
transpile 路径遍历漏洞
transpile is an open source package that converts JavaScript modules from one format to another. transpile suffers from a security vulnerability that stems from the application's lack of input sanitization or whitelisting, combined with poor exception handling in the .to function, which makes it...