6832 matches found
GHSA-6HCJ-QRW3-M66Q Fava vulnerable to reflected cross-site scripting
Fava before 1.22.3 is vulnerable to reflected cross-site scripting due to improper validation on filter conversion...
RHEL 8 : java-1.8.0-ibm (RHSA-2022:5837)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5837 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...
Fedora: Security Advisory for golang-jaytaylor-html2text (FEDORA-2022-37aef44d1e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-gopkg-neurosnap-sentences-1 (FEDORA-2022-37aef44d1e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-gopkg-neurosnap-sentences-1-1.0.6-15.fc36
This command line utility will convert a blob of text into a list of sentence s...
[SECURITY] Fedora 36 Update: golang-github-mozillazg-pinyin-0.19.0-5.fc36
This package provides tools and Golang library to convert Chinese characters to Pinyin...
[SECURITY] Fedora 36 Update: golang-github-lofanmi-pinyin-1.0-5.fc36
This package provides tools and Golang library to convert Chinese characters to Pinyin...
[SECURITY] Fedora 36 Update: golang-github-axgle-mahonia-0-0.14.20181112git3358181.fc36
Mahonia is a character-set conversion library implemented in Go. All data is compiled into the executable; it doesn't need any external data files...
Adobe Acrobat and Adobe Acrobat Reader Buffer Overflow Vulnerability
Adobe Acrobat and Adobe Acrobat Reader are both products of the United States Ordoby Adobe.Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDF. Adobe Acrobat and Adobe Reader has a buffer overfl...
Reflected XSS on conversion filter function
Description Fava v1.22 have a conversion filter function on income statement dashboard which allow user to perform XSS due to improper validation on filter conversion. Proof of Concept 1 Navigate to Fava demo instance https://fava.pythonanywhere.com/example-beancount-file/incomestatement/. 2 Filt...
mariadb: crash via window function in expression in ORDER BY
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/fieldconv.cc, affecting availability...
mariadb: use-after-poison when complex conversion is involved in blob
A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Itemfuncin::cleanup. This issue is exploited via specially crafted SQL statements, affecting availability...
CVE-2022-31471
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files...
CVE-2022-33977
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service DoS condition on the server where the...
Untangle code issues and vulnerabilities
untangle is a package from the individual developer Christian Stefanescu in Germany. It is used to convert XML to Python objects. A code issue vulnerability exists in untangle that stems from insufficient validation of user-supplied XML input...
[SECURITY] Fedora 35 Update: golang-github-lofanmi-pinyin-1.0-4.fc35
This package provides tools and Golang library to convert Chinese characters to Pinyin...
CVE-2022-34031
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsvaluetonumber at src/njsvalueconversion.h...
Fedora: Security Advisory for golang-jaytaylor-html2text (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Accusoft ImageGear PSD Header processing memory allocation out-of-bounds write vulnerability
Summary An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions...