PT-2022-23652 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to SMR Sep-2022 Release 1 Description: The issue is related to an Improper Authorization vulnerability. It affects the setDualDARPolicyCmd function, allowing local attackers to cause a local permanent denial of servic...

PT-2022-28233

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 1.0.6 Description The issue allows end users to access all source code, files, and folders in the phoenix files/extensions/ directory through a simple HTTP GET request. Recommendations For versions prior to 1.0.6,...

PT-2022-13117

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 24.2 Description A local attacker, as a different local user, may be able to send a HTTP request to "127.0.0.1:10000" after the user, typically a developer, manually invoked the ./tools/run-dev-server script...

PT-2022-17556 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.7.2 Description: A race condition can cause incorrect HTTP request routing. The issue affects the routing of some HTTP requests when using httpauth. Recommendations: For versions prior to 0.7.2, upgrade to versio...

PT-2021-17006

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description The issue is related to insufficient input validation in the SNP GUEST REQUEST command, which may lead to a potential data abort error and a denial of service. Recommendations At the moment...

PT-2021-24391

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.2.15 Description: The issue arises when using the @nonreentrant decorator, causing reentrancy protection storage slots to be allocated to the same slots as storage variables. This leads to the corruption of stora...

PT-2021-30850

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.3.1 Description A potential integer overflow issue has been identified. Recommendations For versions prior to 2.3.1, update to version 2.3.1 to resolve the issue...

PT-2021-23607 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 1.1.1 Description: Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least o...

PT-2021-24387

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 1.2.4 Description: The issue occurs when a user is actively blocking the location or weather APIs, or those APIs become unavailable, allowing API keys to be leaked to an active IRC channel. Recommendations: For...

PT-2021-24416

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 4.0.0 Description: The issue arises during the setup of two-factor authentication using an authenticator app, where a QR code is generated and made available via a GET request to "/tf-qrcode". Since GET requests do...

PT-2020-21218

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.0.0 Description An issue exists where an attacker can inject a valid HMAC-SHA1 signature using only the knowledge of the RSA public key, allowing them to bypass signature validation. Recommendations For versions...

PT-2020-16137 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions 3.5 through 3.5.13 SoftwareX versions 3.7 through 3.7.7 SoftwareX versions 3.8 through 3.8.4 SoftwareX versions 3.9 through 3.9.1 Description: The filter in the tag manager required extra sanitizing to prevent a reflected X...

PT-2020-21107

Name of the Vulnerable Software and Affected Versions SoftwareX version 8.9.4 Description The issue concerns malicious code in the preinstall script of the package, which reads the system's SSH keys but does not upload them to a remote server. Recommendations Remove the package from your...

PT-2019-14985

Name of the Vulnerable Software and Affected Versions SoftwareX versions 4.1.0 through 5.0.2 Description The issue affects various versions of the software, with a fix available in version 5.0.2.1. Recommendations For versions 4.1.0 through 5.0.2, update to version 5.0.2.1 to resolve the issue...

PT-2018-9547

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 5.0.0-RC4 Description The issue is related to a XML External Entity XXE vulnerability in the XML Parser for the REST Server. This can lead to the disclosure of confidential data, denial of service, Server-Side Reque...