36 matches found
OPENSUSE-SU-2024:11708-1 cargo-audit-advisory-db-20220105-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20220105-1.1 package on the GA media of openSUSE Tumbleweed...
rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency
Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...
CVE-2023-32302
Rejected reason: Authoritative user requested CVE rejection https://github.com/github/advisory-database/pull/2575issuecomment-1745811653...
Python <= 3.12.1 'RecursionError' Vulnerability - Linux
Python is prone to a SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...
GHSA-3244-8MFF-W398 Reflected XSS in Gotify's /docs via import of outdated Swagger UI
Impact Gotify exposes an outdated instance of the Swagger UI API documentation frontend at /docs which is susceptible to reflected XSS attacks when loading external Swagger config files. Specifically, the DOMPurify version included with this version of Swagger UI is vulnerable to a rendering XSS...
Reflected XSS in Gotify's /docs via import of outdated Swagger UI
Impact Gotify exposes an outdated instance of the Swagger UI API documentation frontend at /docs which is susceptible to reflected XSS attacks when loading external Swagger config files. Specifically, the DOMPurify version included with this version of Swagger UI is vulnerable to a rendering XSS...
Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability
Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description In Magento prior to 1.9.4.3 and Magento prior to...
Pillow -- Regular Expression Denial of Service (ReDoS)
GitHub Advisory Database reports: Uncontrolled Resource Consumption in pillow. The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function. References: https://nvd.nist.gov/vuln/detail/CVE-2021-23437...
RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format
If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...
Obsolete versions of the `rustsec` crate do not support the new V3 advisory format
If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...
ruby-advisory-db
Ruby Advisory Database The Ruby Advisory Database is a commun...
Secunia Research: Opera "Download" Dialog File Execution Security Issue
====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...
Secunia Research: KDE KGet Insecure File Operation Vulnerability
====================================================================== Secunia Research 13/05/2010 - KDE KGet Insecure File Operation Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure
====================================================================== Secunia Research 17/03/2010 - Quicksilver Forums "mysqldump" Password Disclosure - ====================================================================== Table of Contents Affected...
Secunia Research: Internet Explorer Data Stream Handling Vulnerability
====================================================================== Secunia Research 08/04/2008 - Internet Explorer Data Stream Handling Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: Microsoft Windows Object Packager Dialog Spoofing
====================================================================== Secunia Research 11/10/2006 - Microsoft Windows Object Packager Dialog Spoofing - ====================================================================== Table of Contents Affected...