422 matches found
DEBIAN-CVE-2021-45423
A Buffer Overflow vulnerabilityexists in Pev 0.81 via the peexports function from exports.c.. The array offsetstoNames is dynamically allocated on the stack using exp-NumberOfFunctions as its size. However, the loop uses exp-NumberOfNames to iterate over it and set its components value. Therefore...
UBUNTU-CVE-2021-45423
A Buffer Overflow vulnerabilityexists in Pev 0.81 via the peexports function from exports.c.. The array offsetstoNames is dynamically allocated on the stack using exp-NumberOfFunctions as its size. However, the loop uses exp-NumberOfNames to iterate over it and set its components value. Therefore...
SUSE CVE-2006-5158
The nlmclntmarkreclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service process crash and deny access to NFS exports via unspecified vectors that trigger a kernel oops null dereference and a deadlock...
PT-2023-12661 · Unknown · Appium-Running +1
Name of the Vulnerable Software and Affected Versions: nemo-appium versions prior to 0.0.9 Description: The issue arises from improper input sanitization in the module.exports.setup function, leading to Command Injection. To exploit this, appium-running 0.1.3 must be installed as one of...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the...
vrgraniteexports.com Cross Site Scripting vulnerability OBB-3045820
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-22908 · WordPress · Export/Import Users/Customers
Name of the Vulnerable Software and Affected Versions: Import and export users and customers WordPress plugin versions prior to 1.20.5 Description: The issue concerns the improper escaping of data when exporting it via CSV files. This could potentially lead to security issues, although specific...
CVE-2022-3380
The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports intentionally or not a malicious file and a suitable gadget chain is present on the blog...
PT-2022-6378 · Cisco · Cisco Fxos +1
Name of the Vulnerable Software and Affected Versions: Cisco UCS Manager Software affected versions not specified Cisco FXOS Software affected versions not specified Description: A weakness in the encryption method used for the backup function could allow an unauthenticated attacker with access t...
Malicious code in 5to6-exports (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 341557457bb8c37a9fe35de09fad31d239bf12cb8d137417205690870f214cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-39 Malicious code in 5to6-exports (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 341557457bb8c37a9fe35de09fad31d239bf12cb8d137417205690870f214cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1194
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability...
CVE-2022-1194
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability...
@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)
font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...
@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)
font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...
GHSA-VQGR-MFXM-47F3 git-archive vulnerable to Command Injection via exports function
All versions of package git-archive are vulnerable to Command Injection via the exports function...
git-archive vulnerable to Command Injection via exports function
All versions of package git-archive are vulnerable to Command Injection via the exports function...
CVE-2020-28422
All versions of package git-archive are vulnerable to Command Injection via the exports function...
