abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +92 more potentially affected by CVE-2021-29527 via tensorflow (>=2.4.0 <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29527 Source advisory: OSV:GHSA-X4G7-FVJJ-PRG8...

Parabirb wrongthink 跨站脚本漏洞

Parabirb wrongthink is Parabirb an open source application . It provides an end-to-end encryption feature. A security vulnerability exists in Wrongthink version 2.4.1 that allows users to enter their fingerprint into the service and enter a script to run arbitrary JavaScript on the site...

PT-2021-2951 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to a lack of protection for SQL query structures in the Magento Commerce platform, which can be...

PT-2021-2309 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to improper authorization in the integrations module of Magento Commerce, which can be exploited by ...

MantisBT Security Vulnerabilities

MantisBT is MantisBT Mantisbt team of a Web-based open source defect tracking system . The system provides project management and defect tracking services in the form of Web operations. MantisBT before 2.4.1 A security vulnerability exists that can be exploited by attackers to gain access to...

DEBIAN-CVE-2020-11763

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp...

PT-2020-6213 · Openexr +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: An issue in OpenEXR is related to an off-by-one error in the use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read. This could potentially all...

UBUNTU-CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache...

DEBIAN-CVE-2018-1000557

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting XSS vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary javascript code within a victims' browser. This attack appear to be exploitable via Victim mus...

Structured Data Linter Directory Traversal Vulnerability

Structured Data Linter is an open source embedded RDF markup for extracting and validating HTML. A directory traversal vulnerability exists in Structured Data Linter 2.4.1 and earlier versions, which stems from the program failing to detect user input. An attacker can exploit this vulnerability t...

ALPINE-CVE-2017-9227

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbcenclen during regular expression searching. Invalid handling of reg-dmin in forwardsearchrange could result in an invalid pointer...

PYSEC-2017-48

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2017-01280)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

CVE-2009-3241

creationtimestamp| type| source ---|---|--- 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33222...

CVE-2008-2413

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31802...

PT-2004-2007 · Paul'S Ppp · Ppp

Name of the Vulnerable Software and Affected Versions: ppp version 2.4.1 Description: The issue is caused by an integer underflow in the cbcp.c file of the pppd application, allowing remote attackers to cause a denial of service by crashing the daemon. This is achieved by sending a CBCP packet wi...