CVE-2017-20112

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been...

UBUNTU-CVE-2022-29217

PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT library requires that the application chooses what algorithms are supported. The application can...

xmlgraphics-commons: SSRF due to improper input validation by the XMPParser

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users...

Cross-site Request Forgery (CSRF)

Overview joplin is a note taking and to-do application. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to missing CSRF checks in various forms. Remediation Upgrade joplin to version 2.3.2 or higher. References - GitHub Commit Credit: Laurent Cozic...

PT-2021-18313 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: An attacker can cause a denial of service by exploiting a CHECK-failure coming from the...

PT-2019-15560 · Helm +2 · Helm +2

Name of the Vulnerable Software and Affected Versions: Helm versions 2.x through 2.15.1 Description: The issue allows a maliciously designed chart to include sensitive content, such as /etc/passwd, or to execute a denial of service DoS via a special file, like /dev/urandom, using symlinks. This i...