CVE-2023-23950

User’s supplied input usually a CRLF sequence can be used to split a returning response into two responses...

CVE-2023-23611

LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Authorization. Any LTI tool that is integrated with on the Open edX platform can post a grade back...

PT-2023-13918 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comma...

CVE-2023-23611 xblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementation

LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Authorization. Any LTI tool that is integrated with on the Open edX platform can post a grade back...

Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

USN-5820-1 exuberant-ctags vulnerability

Lorenz Hipp discovered a flaw in exuberant-ctags handling of the tag filename command-line argument. A crafted tag filename specified in the command line or in the configuration file could result in arbitrary command execution...

conntrack-tools bug fix and enhancement update

An update is available for conntrack-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The conntrack-tools packages enable the user to set up a High...

Divide By Zero in function adjust_skipcol

Description Divide By Zero in function adjustskipcol at move.c:1978 vim version git log commit 7193323b7796c05573f3aa89d422e848feb3a8dc HEAD - master, tag: v9.0.1223, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pocdbz01s.dat -c :qa! Floating point exception GDB gdb...

The vulnerability of the Ansible software package, related to the failure to cleanse input data, allows a perpetrator to access confidential information and compromise its integrity.

The vulnerability of the Ansible software package lies in the lack of measures taken to sanitize special characters in multi-line YAML strings. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows a attacker to delete any files from the file system.

The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to delete any files from the file system...

Tai-e - An Easy-To-Learn/Use Static Analysis Framework For Java

Tai-e What is Tai-e? Tai-e Chinese: 太阿; pronunciation: ˈtaɪə: is a new static analysis framework for Java please see our technical report for details, which features arguably the "best" designs from both the novel ones we proposed and those of classic frameworks such as Soot, WALA, Doop, and...

PT-2023-12323 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager RLM versions through 14.2BL4 Description: The issue concerns a CRLF vulnerability in the Reprise License Manager RLM web interface. This vulnerability is located in the password parameter of the View License Result...

CRLF Injection

Overview swift-server/async-http-client is a HTTP Client library built on top of SwiftNIO Affected versions of this package are vulnerable to CRLF Injection due to insufficient validation of HTTP header field values before sending them to the network. Users are vulnerable if they pass untrusted...

The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.

The vulnerability of the PFE evo-pfemand control daemon for JunOS Evolved involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by executing arbitrary commands through the command line interface, or by sending...

CVE-2015-10062

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...

CVE-2015-10062

The CVE-2015-10062 entry relates to galaxy-data-resource up to version 14.10.0, with an injection vulnerability in the Command Line Template component caused by manipulation of an unspecified part. A fix is available: upgrade to version 14.10.1. A patch hash is provided (50d65f45d3f5be5d1fbff2e45...

CVE-2015-10062 galaxy-data-resource Command Line Template injection

A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...

PT-2023-10241 · Unknown · Galaxy-Data-Resource

Name of the Vulnerable Software and Affected Versions: galaxy-data-resource versions up to 14.10.0 Description: A problematic issue was found in the Command Line Template component of galaxy-data-resource, leading to injection through manipulation of an unknown part. Upgrading to version 14.10.1...

PT-2023-9889 · Unknown · Msmania Poodim

Name of the Vulnerable Software and Affected Versions: msmania poodim affected versions not specified Description: A critical issue was found in the Command Line Argument Handler component, leading to a stack-based buffer overflow. This can be initiated remotely. Recommendations: At the moment,...