roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:RUSTSEC-2021-0129...

CVE-2021-39312: Improper Limitation of a Pathname to a Restricted Directory

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

PT-2021-22521

Name of the Vulnerable Software and Affected Versions: True Ranker plugin versions = 2.2.2 Description: The issue allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the...

Fortinet FortiOS has an unspecified vulnerability (CNVD-2022-06912)

Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. The system provides users with a variety of security features such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam.Fortinet FortiOS ha...

Vim memory mis-reference vulnerability

Vim is a UNIX-based editor. vim is vulnerable to a memory mis-reference vulnerability in the exopen function in src/exdocmd.c, which could be exploited to cause a denial of service or code execution...

PT-2021-6889 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions prior to 7.0.3 Description: A download of code without integrity check vulnerability in the "execute restore src-vis" command may allow a local authenticated attacker to download arbitrary files on the device via specially...

VulnCheck KEV: CVE-2021-44168

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files...

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

CVE-2021-36564: Deserialization of Untrusted Data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

CVE-2020-36129 affects AOM/libaom v2.0.1 with a stack buffer overflow in src/aom_image.c. CVSSv3.1 base 8.8 (network, high impact). Connected sources confirm patched updates across multiple distributions: openSUSE/SUSE advisories (openSUSE-SU-2021:1624-1; openSUSE update notes) and GLSA/Mageia ad...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129: Out-of-bounds Write

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2021-43690

YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The root cause is the exit function terminating the script and printing a message that contains data read from a socket (socket_read). This can lead to reflected or stored XSS depending on how the messag...

CVE-2021-43690

YurunProxy v0.01 is affected by a Cross Site Scripting XSS vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socketread...

PT-2021-23915

Name of the Vulnerable Software and Affected Versions: YurunProxy version 0.01 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the src/Client.php file. The exit function will terminate the script and print a message that includes values from the socket read. This...

CVE-2021-43690: Improper Neutralization of Input During Web Page Generation

YurunProxy v0.01 is affected by a Cross Site Scripting XSS vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socketread...