110 matches found
OESA-2024-2361 gsl security update
The GNU Scientific Library GSL is a collection of routines for numerical analysis, written in C. Security Fixes: GSL GNU Scientific Library through 2.8 has an integer signedness error in gslsimansolvemany in siman/siman.c. When params.ntries is negative, incorrect memory allocation...
CVE-2024-45060
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting XSS vulnerability due to improper handling of input where a number is expected leading to formula injection. The code in in...
CVE-2024-45060
Summary (CVE-2024-45060) PhpSpreadsheet (PHPOffice) contains a cross-site scripting (XSS) vulnerability in a sample file. The issue arises when user-supplied input is concatenated directly into spreadsheet formulas in the 45_Quadratic_equation_solver.php script, enabling formula injection and Jav...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the discriminantFormula and r1Formula processes due to improper user input sanitization. An attacker can execute arbitrary JavaScript code by injecting malicious input into the POST parameters used in...
Cross-site Scripting (XSS)
Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Cross-site Scripting XSS through the discriminantFormula and r1Formula processes due to improper user input sanitization. An...
Malicious code in pythoncaptchasolver (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in discord-solver (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5072 Malicious code in discord-solver (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ai-solver-gen (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ai-solver-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4743 Malicious code in ai-solver-gen (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4744 Malicious code in ai-solver-images (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ai-solver-images (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4745 Malicious code in ai-solver-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-37795
A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...
DEBIAN-CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37795
A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...
DEBIAN-CVE-2024-37795
A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...