Security update for python-mechanize (moderate)

openSUSE Security Update: Security update for python-mechanize Announcement ID: openSUSE-SU-2023:0030-1 Rating: moderate References: 1202003 1207242 Cross-References: CVE-2021-32837 Affected Products: openSUSE Backports SLE-15-SP4 An update that solves one vulnerability and has one errata is now...

GHSA-Q79M-C546-2G63 CakePHP vulnerable to Denial of Service attack through XML payloads

RequestHandlerComponent had a vulnerability that would allow well crafted requests to create a denial of service attack. RequestHandlerComponent leverages Xml::build which allows reading local files. We recommend that all applications using RequestHandlerComponent upgrade, or disable parsing XML...

PT-2023-33052 · Unknown · Requesthandlercomponent

Name of the Vulnerable Software and Affected Versions: RequestHandlerComponent affected versions not specified Description: The issue allows well-crafted requests to create a denial of service attack. It is related to the use of Xml::build, which enables reading local files. Recommendations: For...

PT-2023-15903 · Mycms · Mycms

Name of the Vulnerable Software and Affected Versions: MyCMS affected versions not specified Description: A problematic issue was found in MyCMS, affecting the build view function of the file lib/gener/view.php in the Visitors Module. The manipulation of the original/converted argument leads to...

GSD-2023-1001310 media: dvbdev: fix build warning due to comments

media: dvbdev: fix build warning due to comments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000526 media: dvbdev: fix build warning due to comments

media: dvbdev: fix build warning due to comments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

EulerOS Virtualization 2.9.0 : yajl (EulerOS-SA-2023-1240)

According to the versions of the yajl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integ...

CVE-2022-3241

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-3241

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

Sql injection

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-3241 Build App Online < 1.0.19 - Unauthenticated SQL Injection

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-3241

CVE-2022-3241 affects the Build App Online WordPress plugin up to version 1.0.19. The vulnerability is a SQL injection caused by improper sanitisation/escaping of parameters in an unauthenticated AJAX action. Impact per sources is high (CVE CVSS 9.8) with potential for full data compromise and al...

WordPress plugin Build App Online SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2022-37586 · Ultrajson · Ultrajson

Name of the Vulnerable Software and Affected Versions: ultrajson affected versions not specified Description: The issue concerns an integer overflow related to the len function. Additionally, there was a problem with ultrajson building on webassembly e.g., pyodide due to an outdated version of...

APDE 路径遍历漏洞

APDE is a processing IDE for creating and running sketches on Android devices by William Smith Personal Developer. A path traversal vulnerability exists in versions prior to APDE 0.5.2-pre2-alpha, which stems from a function in the...

CVE-2022-43271

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

CVE-2022-43271

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

Cross site scripting

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

CVE-2022-43271

CVE-2022-43271 affects Inhabit Systems Move CRM version 4, build 260, with a cross-site scripting (XSS) vulnerability via the User profile component. Public details in the provided documents confirm the issue exists and indicate a CVSS v3.1 base score of 5.4 (MEDIUM) with network attack vector, l...