12 matches found
CVE-2026-32390 WordPress Nanosoft theme < 1.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nanosoft: from n/a through 1.3.2...
CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1
CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1
CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29
CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29. A patched version of the package is available...
CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27
CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27. A patched version of the package is available...
GHSA-Q5R6-9QWQ-G2WJ Amazon.IonDotnet is vulnerable to Denial of Service attacks
Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...
CVE-2025-11573
An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...
CVE-2025-11573
CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...
CVE-2011-10017
Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...
WordPress VikRentCar Car Rental Management System plugin < 1.3.2 - Cross Site Request Forgery vulnerability
Cross Site Request Forgery vulnerability discovered by Srikar V in WordPress Plugin VikRentCar versions 1.3.2...
AZL-32229 CVE-2023-48795 affecting package terraform for versions less than 1.3.2-25
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
AZL-10863 CVE-2022-1117 affecting package fapolicyd for versions less than 1.3.2-1
A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...