7 matches found
CVE-2026-24134
StudioCMS is a server-side-rendered, Astro native, headless content management system. Versions prior to 0.2.0 contain a Broken Object Level Authorization BOLA vulnerability in the Content Management feature that allows users with the "Visitor" role to access draft content created by...
ffcss Security Vulnerabilities
ffcss is a CLI interface for applying and configuring Firefox CSS themes. A security vulnerability exists in versions prior to ffcss 0.2.0, which stems from a vulnerability that allows an attacker to introduce all characters of a regular expression by bypassing the limitations of the...
PT-2023-20449 · Teler-Waf · Teler-Waf
Name of the Vulnerable Software and Affected Versions: teler-waf versions prior to 0.2.0 Description: teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. The issue allows an attacker to execute arbitrary JavaScript code on the victim's...
PT-2023-12848 · Intel · Oneapi Toolkits Oneapi-Cli
Name of the Vulnerable Software and Affected Versions: oneAPI Toolkits oneapi-cli versions prior to 0.2.0 Description: The issue is related to insecure inherited permissions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...
CVE-2019-15543
An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases...
Buttle Module Path Traversal Vulnerability
buttle module is a static file server module. A path traversal vulnerability exists in versions of the buttle module prior to 0.2.0. An attacker can exploit this vulnerability to read arbitrary files on the server...
CVE-2007-6739
FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command...