2784 matches found
FORT Validator security vulnerability
FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from dereferencing a pointer without first cleaning it up...
FORT Validator security vulnerability
FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from dereferencing a pointer without first cleaning it up...
FORT Validator security vulnerability
FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from unavailable route origin validation...
FORT Validator security vulnerability
FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3 that stems from accessing elements of a collection without first cleaning them...
FORT Validator security vulnerability
FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3 that stems from dereferencing pointers...
Missing Cryptographic Equivocation
github.com/cosmos/gaia is vulnerable to Missing Cryptographic Equivocation. The vulnerability is caused due to an issue in the Interchain Security ICS module that could result in the slashing of a validator for an "old" equivocation...
GHSA-RHM7-7469-RCPW Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
Impact The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open, and the check can be circumvented using upper case. Content editing permissions for RichText content is required to exploit this vulnerability, which...
Persistent Cross-site Scripting in Ibexa RichText Field Type
Impact The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open, and the check can be circumvented using upper case. Content editing permissions for RichText content is required to exploit this vulnerability, which...
PT-2024-30532
Name of the Vulnerable Software and Affected Versions Ibexa RichText Field Type versions prior to 4.6.10 Description The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS, but this can be circumvented using upper case, leaving other options open...
PT-2024-34153
Name of the Vulnerable Software and Affected Versions: symfony/validator versions 5.4.43, 6.4.11, and 7.1.4 Description: The symfony/validator module in the Symphony PHP framework is vulnerable to a regex bypass issue. It is possible to trick a Validator configured with a regular expression using...
Cross-Site Scripting (XSS)
typo3/cms is vulnerable to Cross-Site Scripting XSS. The vulnerability is caused due to a lack of sanitization of content from editors. This allows attackers with valid editor accounts to inject malicious scripts into content scanned by the link validator component...
Unspecified Vulnerability in RADIUS Protocol under RFC 2865
RADIUS Protocol under RFC 2865 is an RFC open source networking protocol. A security vulnerability exists in RADIUS Protocol under RFC 2865, which can be exploited by an attacker to modify any valid response Access-Accept, Access-Reject, or Access-Challenge to any other response using a Choice...
OPENSUSE-SU-2024:14152-1 python310-openapi-spec-validator-0.7.1-1.3 on GA media
These are all security issues fixed in the python310-openapi-spec-validator-0.7.1-1.3 package on the GA media of openSUSE Tumbleweed...
GO-2024-2927 Evmos is missing create validator check in github.com/evmos/evmos
Evmos is missing create validator check in github.com/evmos/evmos...
Malicious code in attr-validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6718 Malicious code in attr-validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6712 Malicious code in at-least_one_existence_validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in at-least_one_existence_validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...