PT-2023-22673 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0 Description: A heap overflow issue was discovered in YASM via the handle dot label function at /nasm/nasm-token.re. This issue has been disputed by third parties, arguing it is a bug rather than a security issue because YAS...

CVE-2014-125099

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to...

WordPress Plugin I Recommend This SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2014-125099: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to...

TigerGraph 安全漏洞

TigerGraph is one of the world's fastest and most scalable graph analytics platforms from the TigerGraph community. Enabling real-time big data graph applications. A security vulnerability exists in TigerGraph Enterprise Free Edition version 3.x. The vulnerability stems from the presence of...

CVE-2023-26773

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

PT-2023-9822

Name of the Vulnerable Software and Affected Versions NuGet versions 6.6.0 and earlier NuGet versions 6.5.0 and earlier NuGet versions 6.4.1 and earlier NuGet versions 6.3.2 and earlier NuGet versions 6.2.3 and earlier NuGet versions 6.0.4 and earlier NuGet version 5.11.4 .NET SDK versions 7.0.10...

Medium: curl

Issue Overview: A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials set for this transfer. This issue leads to an authentication bypass, either by mistake or...

CVE-2023-25689: Improper Limitation of a Pathname to a Restricted Directory

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 24761...

SUSE CVE-2023-27789

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint...

TCPprep 安全漏洞

Appneta tcpprep is a set of open source GPLv3 licensed utilities from Appneta, Inc. For UNIX and Win32 under Cygwin operating systems, it is used to edit and replay network traffic previously captured by tools such as tcpdump and Wireshark. A security vulnerability exists in TCPprep version...

ALPINE-CVE-2023-27103

Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derivecollocatedmotionvectors at motion.cc...

VulnCheck KEV: CVE-2022-31678

VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure...

PYSEC-2023-42

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1...

csv-interact (>=0.0.1, <=1.0.0), jb55-json2csv (>=3.0.0, <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (1.2.3)

dot-lens NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser 0.0.1 Source cves: CVE-2023-26106 Source advisory: OSV:GHSA-RMHG-2CVV-Q7VX...

dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

GHSA-RMHG-2CVV-Q7VX dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...