CVE-2021-4430

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...

CVE-2021-4430: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...

CVE-2017-20187: Improper Neutralization of Special Elements in Output Used by a Downstream Component

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3....

CVE-2023-5099

The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute...

PT-2023-31720

Name of the Vulnerable Software and Affected Versions HTML filter and csv-file search plugin for WordPress versions up to, and including, 2.7 Description The issue allows authenticated attackers with contributor-level permissions and above to include and execute arbitrary files on the server via...

CVE-2023-5099: Improper Control of Filename for Include/Require Statement in PHP Program

The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute...

CVE-2023-5835

A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is wh...

CVE-2023-5835

A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is wh...

CVE-2023-5835

CVE-2023-5835 affects hu60t/hu60wap6: the markdown function in src/class/ubbparser.php is vulnerable to cross-site scripting. The issue allows remote exploitation; information on affected releases is not provided due to no versioning. A patch is available: a1cd9f12d7687243bfcb7ce295665acb83b9174e...

CVE-2023-5835: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is wh...

CVE-2023-46246

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function "gagrowinner" in in the file "src/alloc.c" at line 748, which is freed in the file "src/exdocmd.c" in the function "docmdline" at line 1010 and then used again in "src/cmdhist.c" at...

CVE-2023-46246: Use After Free

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...

CVE-2023-46345

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

Null pointer dereference

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

CVE-2023-46345

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

Important: python3

Issue Overview: A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, kubernetes-csi-livenessprobe, aws-efs-csi-driver-fips, timestamp-authority-fips, falcoctl-fips, slsa-verifier, kubeflow, volume-modifier-for-k8s-fips, smarter-device-manager-fips, prometheus-blackbox-exporter, buildkitd, plutono-fips, kubevela, bank-vaults-fip...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: src, cortex, k3d, up, dgraph, slsa-verifier, kubevela, kubeflow, kubescape, spark-operator, terraform-provider-sendgrid, buildkitd, scorecard, aactl...

CVE-2023-46345: NULL Pointer Dereference

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

CVE-2023-46345

Catdoc v0.95 is affected by a NULL pointer dereference in the xls2csv component (src/xlsparse.c). The issue can impact availability (per CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) but does not affect confidentiality or integrity per the same entry. There is no publicly documented fix or patched v...