203 matches found
XSS vulnerability in markdown-formatter
markdown-formatter 0.1.0 and earlier uses a Markdown library to parse Markdown that does not escape crafted link target URLs. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup...
CVE-2021-21269
Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...
CVE-2021-21269
Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...
CVE-2021-21269 Path Traversal in Keymaker
Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...
Keymaker Path Traversal Vulnerability
A path traversal vulnerability exists in Keymaker before version 0.2.0, which stems from a failure to check the join method of rust that checks for user input, potentially allowing it to perform a path traversal attack that could result in reading more files than allowed...
Py-EVM Security Vulnerability
Py-EVM is a Python-based implementation of an Ethernet virtual machine. A security vulnerability exists in Py-EVM version 0.2.0-alpha.33. An attacker can exploit the vulnerability to cause a denial of service...
OpenTrade Cross-Site Scripting Vulnerability
OpenTrade is an open source cryptocurrency trading platform. A cross-site scripting vulnerability exists in OpenTrade 0.2.0 and prior versions. The vulnerability stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit the vulnerability to execute...
CVE-2020-6847
OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript...
rpcbind backlink vulnerability
rpcbind is a server that translates RPC program numbers into generic addresses for use on Linux systems. A backlink vulnerability exists in rpcbind version 0.2.0, which can be exploited by a local attacker to perform a write operation or gain privileges to an arbitrary file...
pam_p11 for OpenSC Buffer Overflow Vulnerability
OpenSC is an open source smart card tool and middleware. pamp11 is one of the authentication components. A buffer overflow vulnerability exists in pamp11 for OpenSC version 0.2.0 and version 0.3.0, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Clara Genomics Analysis Integer Overflow Vulnerability
Clara Genomics Analysis is an open source software package for biological sequence analysis. An integer overflow vulnerability exists in Clara Genomics Analysis versions prior to 0.2.0. The vulnerability stems from a networked system or product that does not properly validate incoming data. No...
buttle npm package cross-site scripting vulnerability
buttle npm package is a static file server. A cross-site scripting vulnerability exists in version 0.2.0 of the buttle npm package, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...
CVE-2019-5422
XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server...
Cross site scripting
XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server...
Py-EVM Denial of Service Vulnerability
Py-EVM is a Python-based implementation of an Ethernet virtual machine. A denial of service vulnerability exists in Py-EVM version 0.2.0-alpha.33, which can be exploited by an attacker to cause a denial of service...
Path traversal
Path traversal in buttle module versions = 0.2.0 allows to read any file in the server...
PT-2018-16184 · Buttle · Buttle
Name of the Vulnerable Software and Affected Versions: buttle versions = 0.2.0 Description: The issue concerns a path traversal vulnerability in the buttle module, allowing attackers to read any file on the server due to insufficient input sanitization. This can be exploited by using relative pat...
CVE-2018-1267
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group ASG that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless o...
Confire config.py File Arbitrary Command Execution Vulnerability
Confire is a set of application configuration tools built on Scapy, Django and other configuration parsers. A security vulnerability in the YAML parsing function of the config.py file in Confire version 0.2.0 stems from the program using the 'yaml.load' function to load user-specific configuratio...
