SpdyStream 安全漏洞

SpdyStream is a SPDY-based multiplexing stream processing library developed by Moby. Versions of SpdyStream prior to 0.5.0 contain security vulnerabilities. These vulnerabilities stem from the SPDY/3 frame parser not verifying the count and length of the frame before allocating memory. This allow...

libsnowflakeclient 日志信息泄露漏洞

libsnowflakeclient is a Snowflake open source Snowflake tool. A log information disclosure vulnerability exists in libsnowflakeclient versions prior to 0.5.0 through 2.2.0, which stems from debug logging sensitive information...

fossbilling 安全漏洞

fossbilling is a free open source solution for efficient billing and customer management. A security vulnerability exists in fossbilling versions prior to 0.5.0 that stems from a business logic error...

PT-2023-23702 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling versions prior to 0.5.0 Description: The issue concerns Business Logic Errors in the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the issue...

PT-2023-23690 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling/fossbilling versions prior to 0.5.0 Description: The issue is related to insufficient granularity of access control. There is no information provided about the estimated number of potentially affected devices worldwide or real-wor...

PT-2023-23710 · Unknown · Fossbilling

Name of the Vulnerable Software and Affected Versions: fossbilling versions prior to 0.5.0 Description: The issue is related to missing authorization in the GitHub repository fossbilling/fossbilling. Recommendations: For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the iss...

PT-2023-3087

Name of the Vulnerable Software and Affected Versions xml2js versions prior to 0.5.0 Description The issue is related to uncontrolled modification of object prototype attributes in the xml2js software, which converts XML objects to JavaScript. This can allow a remote attacker to edit properties o...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in dync crate before 0.5.0 for Rust that allows access to unaligned elements, as u8 is not always a problematic type...