perl-DateTime-TimeZone bug fix and enhancement update

An update is available for perl-DateTime-TimeZone. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

perl-DateTime-TimeZone bug fix and enhancement update

An update is available for perl-DateTime-TimeZone. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

Regular Expression Denial of Service (ReDoS)

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the gr.Datetime component. An attacker can cause the server to consume excessive CPU resources and...

CVE-2024-10624

A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...

Gradio 资源管理错误漏洞

Gradio, an open source Python library from Gradio Open Source, is a method for demonstrating machine learning models through a friendly web interface. A resource management error vulnerability exists in Gradio version 98cbcae, which stems from a regular expression used by the gr.Datetime componen...

org.webjars.npm:github-com-xdan-datetimepicker (=2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4 <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (=1.3.6)

org.webjars.npm:php-date-formatter MAVEN version =1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker =2.5.20 -...

CVE-2024-55513

creationtimestamp| type| source ---|---|--- 2024-12-17 20:05:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113669958969464068 2024-12-17 21:48:10+00:00| seen| https://t.me/cvedetector/13128...

NuGet Package 'Microsoft.Recognizers.Text.DateTime' Detection

The remote host has a 'Microsoft.Recognizers.Text.DateTime' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Malicious code in FlսeոtDatеTіme (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4802

A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submitextracurricularactivity.php. The manipulation of the argument activitydatetime leads to sql injection. It is possible to launch the attack...

PT-2024-32936 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file submit extracurricular activity.php. The manipulation of the activity datetime argument leads to SQL...

Fedora 38 : python-nikola (2024-1eb20f8ec3)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1eb20f8ec3 advisory. Update to the latest stable version: Features -------- Implement a new plugin manager from scratch to replace Yapsy, which does not work on Python 3.12 due t...

CVE-2024-23181

creationtimestamp| type| source ---|---|--- 2024-01-23 11:21:30+00:00| seen| https://t.me/ctinow/171860 2024-02-17 07:06:52+00:00| seen| https://t.me/ctinow/186795...

USN-6553-1 pydantic vulnerability

Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial of service via application crash. CVE-2021-29510...

Ubuntu 20.04 ESM : Pydantic vulnerability (USN-6553-1)

The remote Ubuntu 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6553-1 advisory. Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial o...

Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.6.8 or apply this patch manually...

GHSA-599V-H3Q5-G6R9 Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.6.8 or apply this patch manually...

USN-6291-1 gstreamer1.0 vulnerability

Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose sensitive information...

USN-6291-1: GStreamer vulnerability

Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose sensitive information...

WordPress Delivery & Pickup Scheduling DateTime Picker Plugin for WooCommerce - Date Time Picker Plugin for WooCommerce Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Delivery & Pickup Scheduling DateTime Picker Plugin for WooCommerce - Date Time Picker Plugin for WooCommerce Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity...