GHSA-Q674-XM3X-2926 Uncontrolled Resource Consumption in parse-link-header

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...

Information Disclosure

apache-james-imap-api is vulnerable to information disclosure. The vulnerability exists due to the use of STARTTLS commands which allows an attacker to gain access to sensitive information...

Library System In PHP 1.0 Cross Site Scripting

Exploit Title: Library System in PHP 1.0 - 'publisher name' Stored Cross-Site Scripting XSS Google Dork: NA Date: 03-OCT-2021 Exploit Author: Akash Rajendra Patil Vendor Homepage: https://www.yahoobaba.net/project/library-system-in-php Software Link:...

Authorization Bypass

org.apache.activemq:artemis-amqp-protocol is vulnerable to authorization bypasses. The application allows attackers to bypass security authorization due to improper handling of server sessions while deleting queues, resulting in unauthorized server access...

PT-2021-22892 · R3D Sdk +1 · R3D Sdk +1

Name of the Vulnerable Software and Affected Versions: DPDecoder service affected versions not specified Description: The issue arises when the DPDecoder service parses a submitted file as a job, using decoding parameters and fields parsed by the R3D SDK to calculate a heap buffer size. An intege...

Cross-Site Request Forgery (CSRF)

solidusfrontend is vulnerable to cross-site request forgery CSRF. The vulnerability allows an attacker to add malicious content to the user's cart...

GHSA-RXCH-GP62-574W snipe-it is vulnerable to Cross-site Scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Remote Code Execution (RCE)

md-to-pdf is vulnerable to remote code execution. The library does not properly disable the JS engine in default when the library utilizing gray-matter to parse front matter content, allowing an attacker to execute the remote code through the JS engine...

Denial Of Service (DoS)

qt5-qtwebengine is vulnerable to denial of service. A type confusion security issue has been found in the V8 component of the Chromium browser engine...

Prototype Pollution

@fabiocaccamo/utils.js is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the set function in ObjectUtil.js and modify the proto attribute...

snipe-it is vulnerable to Cross-site Scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2021-17909 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about...

PT-2021-17912 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is available about the issue. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2021-17911 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is available about the issue. Recommendations: At the moment, there is no information about a newer version that contain...

GHSA-VPF5-82C8-9V36 Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

PT-2021-21240 · Dell Emc · Dell Emc Scg

Name of the Vulnerable Software and Affected Versions: Dell EMC SCG versions 5.00.00.10 and earlier Description: A sensitive information disclosure issue exists, allowing a local malicious user to read sensitive information and potentially use it. Recommendations: For versions 5.00.00.10 and...

Denial Of Service (DoS)

busybox:edge is vulnerable to denial of service...

PT-2021-10956 · Pdf2Xml · Pdf2Xml

Name of the Vulnerable Software and Affected Versions: pdf2xml version 2.0 Description: A heap-buffer overflow was discovered in the function TextPage::addAttributsNode. Recommendations: For pdf2xml version 2.0, at the moment, there is no information about a newer version that contains a fix for...

PT-2021-10955 · Pdf2Xml · Pdf2Xml

Name of the Vulnerable Software and Affected Versions: pdf2xml version 2.0 Description: A heap-buffer overflow was discovered in the TextPage::dump function. This issue may allow for potential exploitation. Recommendations: For pdf2xml version 2.0, consider disabling the TextPage::dump function a...

PT-2021-5298 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365, which can be exploited by a remote attacker using a specially crafted...