CVE-2014-125108 w3c online-spellchecker-py spellchecker cross site scripting

A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the file spellchecker. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rathe...

CVE-2014-125108 w3c online-spellchecker-py spellchecker cross site scripting

A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the file spellchecker. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rathe...

CVE-2014-125108: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the file spellchecker. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rathe...

CVE-2023-6568

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

CVE-2023-6568: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2023-49082 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2023-49082 Source advisory: OSV:PYSEC-2023-251...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2023-49081 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2023-49081 Source advisory: OSV:GHSA-Q3QX-C6G2-7PW2...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2023-47627 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2023-47627 Source advisory: OSV:PYSEC-2023-246...

polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2023-47641 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2023-47641 Source advisory: OSV:GHSA-XX9P-XXVH-7G8J...

Fedora 39 : python-markdown-it-py (2023-f970cbb557)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f970cbb557 advisory. Automatic update for python-markdown-it-py-2.2.0-1.fc39. Changelog Wed Mar 15 2023 Karolina Surma - 2.2.0-1 - Update to 2.2.0, includes the fix for...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2023-44271 via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

balebot (>=1.2.8, <=1.8.15), demosys-py (>=1.0.6, <=2.0.3) +19 more potentially affected by CVE-2023-44271 via pillow (5.2.0)

pillow PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - balebot =1.2.8, =1.0.6, =0.3.0, =1.0.7, =1.2.1, =1.8.3, =2.1.0, =2.0.3, =2.1.0 - poltools 1.0.0 and more Source cves: CVE-2023-44271 Source advisory...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2023-44271 via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2023-44271 Source advisory: OSV:PYSEC-2023-227...

scipy: use-after-free in Py_FindObjects() function

A flaw was found in SciPy, where it is vulnerable to a denial of service caused by a use-after-free bug in the PyFindObjects function. By sending a specially crafted request, an attacker can cause a denial of service condition...

bi-etl (1.0.5), devapps (2021.5.10) +7 more potentially affected by CVE-2023-41419 via gevent (20.12.1)

gevent PYPI version 20.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - bi-etl 1.0.5 - devapps 2021.5.10 - easi-py-common =0.0.1a1, =0.5.0, =1.2.14, =0.26.3.post1, =0.2.3, =0.2.2, =0.2.4 Source cves: CVE-2023-41419...

CVE-2023-40956

A SQL injection vulnerability in Cloudroits Website Job Search v.15.0 allows a remote authenticated attacker to execute arbitrary code via the name parameter in controllers/main.py component...

FreeBSD : py-wagtail -- stored XSS vulnerability (17efbe19-4e72-426a-8016-2b4e001c1378)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17efbe19-4e72-426a-8016-2b4e001c1378 advisory. - Wagtail is an open source content management system built on Django. Starting in version 1.5 and prio...

FreeBSD : py-Scrapy -- credentials leak vulnerability (2ad25820-c71a-4e6c-bb99-770c66fe496d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2ad25820-c71a-4e6c-bb99-770c66fe496d advisory. - When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that...

FreeBSD : py-Scrapy -- DoS vulnerability (4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7 advisory. - Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files...

FreeBSD : py-Scrapy -- cookie injection vulnerability (a5403af6-225e-48ba-b233-bd95ad26434a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a5403af6-225e-48ba-b233-bd95ad26434a advisory. - Responses from domain names whose public domain name suffix contains 1 or more periods e.g. responses...