multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-15939 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

satsense (0.9.0) potentially affected by CVE-2019-15939 via opencv-contrib-python-headless (3.4.2.17)

opencv-contrib-python-headless PYPI version 3.4.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - satsense 0.9.0 Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

j5 (0.7.1), zoloto (0.3.0) potentially affected by CVE-2019-15939 via opencv-contrib-python-headless (3.4.18.65)

opencv-contrib-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - j5 0.7.1 - zoloto 0.3.0 Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-14493 via opencv-contrib-python-headless (3.4.3.18)

opencv-contrib-python-headless PYPI version 3.4.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - ximilar-client =1.0.2, =1.10.1 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85...

deeplabcut (>=2.1.10.3, <=2.2.0rc2) potentially affected by CVE-2019-14493 via opencv-python-headless (3.4.9.33)

opencv-python-headless PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcut =2.1.10.3, =2.2.0rc2 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14493 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14493 Source advisory: GHSA-3448-VRGH-85XR...

multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-14493 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

j5 (0.7.1), zoloto (0.3.0) potentially affected by CVE-2019-14493 via opencv-contrib-python-headless (3.4.18.65)

opencv-contrib-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - j5 0.7.1 - zoloto 0.3.0 Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-14491 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

satsense (0.9.0), ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=3.4.2.17, <=3.4.3.18)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.2, =1.10.1 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

pyvisauto (1.0.1), ximilar-client (>=1.10.2, <=1.10.12) +1 more potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

satsense (0.9.0), ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=3.4.2.17, <=3.4.3.18)

opencv-contrib-python-headless PYPI version =3.4.2.17, =1.0.2, =1.10.1 Source cves: CVE-2019-14491 Source advisory: GHSA-FM39-CW8H-3P63...

FUSE - A Penetration Testing Tool For Finding File Upload Bugs

FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload UEFU vulnerabilities. The details of the testing strategy is in our paper, "FUSE: Finding File Upload Bugs via Penetration Testing", which appeared in NDSS 2020. To see how to configure and execute FUSE,...

Directory Traversal

Overview convert-svg-to-png is a package for converting SVG to PNG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a...

PT-2021-4469

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 93.0.4577.63 Description The issue is related to inappropriate implementation in DevTools, which can be exploited by a remote attacker to gain unauthorized access to protected information or cause a denial of...

[ASA-202107-65] jre-openjdk-headless: multiple issues

Arch Linux Security Advisory ASA-202107-65 ========================================== Severity: High Date : 2021-07-22 CVE-ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Package : jre-openjdk-headless Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2188 Summary =====...

[ASA-202107-54] jre11-openjdk-headless: multiple issues

Arch Linux Security Advisory ASA-202107-54 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Package : jre11-openjdk-headless Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2189 Summary...

QIWI: SSRF на https://qiwi.com с помощью "Prerender HAR Capturer"

Здравствуйте! На сайте https://qiwi.com вы используете Prerender HAR Capturer 5.6.0 на основе Headless Chrome для рендеринга HTML, снимков экрана, PDF-файлов и файлов HAR с любой веб-страницы https://github.com/prerender/prerender. Если на qiwi.com послать запрос с измененным юзер-агентом...

Monospace Directus Headless CMS File Upload / Rule Bypass Vulnerabilities

======================================================================= title: Arbitrary File Upload and Bypassing .htaccess Rules product: Monospace Directus Headless CMS vulnerable version: v8.8.2 fixed version: v8.8.2, v9 is not affected because of different architecture CVE number:...