26 matches found
Arbitrary Code Injection
Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection via the PythonCodeTool component, due to a lack of validations. Remediation There is no fixed version for langflow. References - GitHub Issue Credi...
Pleasanter Security Vulnerability
Pleasanter is a free OSS no-code/low-code development tool from Pleasanter. A security vulnerability exists in Pleasanter. An attacker can exploit the vulnerability to perform cross-site scripting attacks...
CVE-2021-40391
Gerbv 2.7.0, dev (commit b5f1eacd) and forks are affected by an out-of-bounds write in the drill format T-code tool number functionality, enabling code execution via a crafted drill file. Connected notes (e.g., Mageia MGASA-2022-0260 and related advisories) confirm this CVE-2021-40391 issue and d...
PT-2021-22891 · Gerbv +3 · Gerbv +3
Name of the Vulnerable Software and Affected Versions: Gerbv version 2.7.0 Gerbv dev commit b5f1eacd Gerbv forked version commit 71493260 Description: An out-of-bounds write issue exists in the drill format T-code tool number functionality. A specially-crafted drill file can lead to code executio...
Remote Code Execution (RCE)
gerbv is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted input in the drill format T-code tool number functionality...
