@medley/medley (>=0.11.0 <=0.12.1), @nova/azure-functions (>=0.3.0 <=0.3.3) +1 more potentially affected by CVE-2020-7764 via find-my-way (>=2.0.1 <=2.1.0)

find-my-way NPM version =2.0.1, =0.11.0, =0.3.0, =1.0.0, =1.1.0 Source cves: CVE-2020-7764 Source advisory: SNYK:JS-FINDMYWAY-1038269...

CVE-2020-7134

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

GHSA-PGCR-7WM4-MCV6 Sensitive Data Exposure in pem

Versions of pem before 1.13.2 expose sensitive data when the readPkcs12 is used. The readPkcs12 function reads the certificate and key data from a pkcs12 file using the encryption password. As part of this process it creates a globally readable file with a filename of 20 random 0-f characters in...

XSS vulnerability with double-encoded entities

An XSS vulnerability CVE-2019-10010 has been identified in all previous versions of this library 0.18.2 and below. The issue has been fixed in version 0.18.3. All users should upgrade to version 0.18.3 immediately. Additionally, if your application caches the resulting HTML, please purge and/or...

XSS vulnerability with unsafe link protocols

An XSS vulnerability CVE-2018-20583 has been identified in the following versions of this library: 0.15.6 0.15.7 0.16.0 0.17.0 0.17.1 0.17.2 0.17.3 0.17.4 0.17.5 0.18.0 It allows unsafe URLs to be added to links. The issue has been fixed in version 0.18.1. All users should upgrade to version 0.18...

cloudwu PBC Null Pointer Dereference Vulnerability

cloudwu PBC is a C-based Google protocol buffer library . A null pointer dereference vulnerability exists in the 'pbcwmessagestring' function in the wmessage.c file of the libpbc.a static link library in cloudwu PBC 2017-03-02 and earlier versions, which can be exploited by an attacker to cause a...

RHEL 3 : Adobe Acrobat Reader (RHSA-2007:0021)

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 23 Jan 2007 The previous acroread packages were missing dependencies on the new...

Visualization Library Multiple Unspecified Vulnerabilities (Linux)

The host is running Visualization Library and is prone to multiple vulnerabilities. Openvas Vulnerability Test $Id: gbvisualizationlibrarymultvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ Visualization Library Multiple Unspecified Vulnerabilities Linux Authors: Rachana Shetty Copyright: Copyrig...

PT-2009-1066 · Libgd +3 · Gd +5

Name of the Vulnerable Software and Affected Versions: gd versions 2.0.28 through 2.0.33 gd-progs versions 2.0.28 through 2.0.33 gd-devel versions 2.0.28 through 2.0.33 PHP versions 5.2.11 and 5.3.x before 5.3.1 Description: The issue is related to the gdGetColors function in gd gd.c, which does...