8 matches found
PT-2024-34846 · Unknown · Buooy Sticky Header
Name of the Vulnerable Software and Affected Versions: Buooy Sticky Header versions through 0.5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions...
UBUNTU-CVE-2023-22652
A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...
UBUNTU-CVE-2023-32181
A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2...
libeconf 安全漏洞
libeconf is a highly flexible and configurable library for parsing and managing key=value configuration files. A security vulnerability exists in versions prior to libeconf 0.5.2 that stems from openSUSE libeconf not checking the input size of buffer replication, resulting in a DoS...
SUSE CVE-2023-32181
A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2...
SUSE CVE-2023-22652
A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...
PT-2022-24866 · Pypi · Dparse
Name of the Vulnerable Software and Affected Versions: dparse versions prior to 0.5.2 Description: dparse is a parser for Python dependency files. The issue concerns a regular expression that is vulnerable to a Regular Expression Denial of Service ReDoS. All users parsing index server URLs with...
PT-2021-23641 · Max Mazurov · Maddy
Name of the Vulnerable Software and Affected Versions: Max Mazurov Maddy versions prior to 0.5.2 Description: The issue concerns the use of a broken or risky cryptographic algorithm, which poses an unnecessary risk that may result in the exposure of sensitive information. Recommendations: For...