255 matches found
a2d (>=0.1.0, <=0.1.11), acrylic-wayland (>=0.1.23, <=0.2.1) +1312 more potentially affected by unknown CVE via memmap (>=0.1.0, <=0.7.0)
memmap CARGO version =0.1.0, =0.1.0, =0.1.23, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.13, =0.5.2, =0.6.10 - aigcapi 5.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0077...
acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)
im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:RUSTSEC-2020-0096...
koa2-swagger-ui (2.2.1), md-docs-express (>=0.0.1, <=0.0.2) potentially affected by unknown CVE via swagger-ui (>=3.0.5, <=3.0.7)
swagger-ui NPM version =3.0.5, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-388G-JWPG-X6J4...
cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)
blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RVWW-X6M4-4VC2...
6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)
comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...
ezs (>=5.5.0, <=9.3.1), hoppel (0.4.0) +2 more potentially affected by unknown CVE via notevil (>=1.0.0, <=1.3.1)
notevil NPM version =1.0.0, =5.5.0, =1.0.0, =1.0.1 - piedpiper-middle-out 5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-7R5F-7QR4-PF6Q...
@gooddata/react-components (>=7.1.0-alpha, <=7.9.2-beta.20), @gooddata/sdk-ui (8.0.0-alpha.14) +38 more potentially affected by unknown CVE via highcharts (>=7.0.0, <=7.2.1)
highcharts NPM version =7.0.0, =7.1.0-alpha, =8.0.0-alpha-afi-afi-one-4619-turn-off-lines-option-2020-09-03T22-09-02-779Z, =0.0.111, =1.1.34, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =7.3.0, =4.1.12, =6.0.0, =0.1.1, =0.1.2 - fe-chart-lib 1.0.0 and more Source cves: unknown CVE Source advisory:...
@coreui/coreui-datatables (1.0.0), @daai/sb-decloud (>=1.0.0, <=1.0.11) +38 more potentially affected by unknown CVE via datatables.net (>=1.10.12, <=1.10.21)
datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: unknown CVE Source advisory: SNYK:JS-DATATABLESNET-598806...
0.8.18-p11 (0.8.18-p12), 08cms (1.0.0) +2101 more potentially affected by CVE-2015-8851 via node-uuid (>=1.1.0, <=1.4.3)
node-uuid NPM version =1.1.0, =0.0.1, =0.0.1-alpha, =0.0.1, =0.0.1, =0.0.2, =0.0.7, =0.0.7, =1.0.14, =2.2.0, =2.2.1 and more Source cves: CVE-2015-8851 Source advisory: OSV:GHSA-265Q-28RP-CHQ5...
Command injection
An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings recorded by the device. It seems that the POST parameters passed in this request to test if email credentials and hostname sent to the device work...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +16152 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.12.2)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-2PR6-76VF-7546...
@1hive/wrapper (5.0.0), @300k/dydx-v3-client (>=1.14.2, <=1.14.7) +504 more potentially affected by unknown CVE via web3 (>=1.0.0-beta.24, <=1.5.2)
web3 NPM version =1.0.0-beta.24, =1.14.2, =0.0.3, =0.1.2, =1.4.3, =1.1.0-1, =5.0.0, =0.5.0, =1.61.0, =0.0.1-beta, =0.24.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-27V7-QHFV-RQQ8...
aho-corasick (>=0.6.7, <=0.6.10), aigc_secp256k1zkp (0.7.12) +131 more potentially affected by CVE-2020-25576 via rand_core (>=0.1.0, <=0.2.2)
randcore CARGO version =0.1.0, =0.6.7, =0.7.0, =0.7.1, =1.0.0, =2.0.1, =1.0.0, =1.2.5, =0.4.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-25576 Source advisory: OSV:RUSTSEC-2019-0035...
Semmle: All Burp Suite Scan report
Summary: 1. Detected Deserialization RCE: Jackson 1.1. https://lgtm-com.pentesting.semmle.net/blog/ lgtmshortsession cookie 1.2. https://lgtm-com.pentesting.semmle.net/internalapi/v0.2/getSuggestedProjects apiVersion parameter 2. Session token in URL 3. CSP: Inline scripts can be inserted 3.1...
libsbmlsim (>=0.0.1, <=0.0.2) potentially affected by CVE-2016-10668 via libsbml (0.0.2)
libsbml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on libsbml and may be impacted: - libsbmlsim =0.0.1, =0.0.2 Source cves: CVE-2016-10668 Source advisory: OSV:GHSA-432J-4FW9-2G6F...
@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +453 more potentially affected by CVE-2018-20676 via bootstrap (>=3.1.1, <=3.3.7)
bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20676 Source advisory: OSV:GHSA-3MGP-FX93-9XV5...
Denial Of Service (DoS)
libglusterfs.so is vulnerable to denial of service DoS attacks. The library contains a memory leak in the client code when the fsync2 system call is used, allowing a malicious user to cause a DoS condition by consuming the system's memory...
Cisco WebEx Recorder and Player ATDL2006 Decompression Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
