CVE-2021-4146: Undefined Security Weakness

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

PT-2022-11414

Name of the Vulnerable Software and Affected Versions pimcore versions prior to 10.2.9 pimcore versions prior to 10.2.6 Description The issue concerns Business Logic Errors in the pimcore/pimcore GitHub repository. It has been noted that in versions prior to 10.2.9, discounts could be set to...

Oracle Java SE and Oracle GraalVM have input validation vulnerabilities

Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to potentially cause an...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

Code injection

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171 Business Logic Errors in janeczku/calibre-web

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

Calibre-web (web application) is affected by CVE-2021-4171 due to Business Logic Errors. The CVSS data indicates high to critical impact (C/H/I/A) with network access, no authentication, and no user interaction required. The vulnerability affects core logic of calibre-web (exact function/file not...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

GNU Recutils Resource Management Error Vulnerability

GNU Recutils is a GNU community tool and library for accessing recfiles plain text databases. GNU Recutils has security vulnerabilities that can be exploited by attackers to cause segmentation errors or application crashes...

GNU Recutils Resource Management Error Vulnerability (CNVD-2022-06489)

GNU Recutils is a GNU community tool and library for accessing recfiles plain text databases. GNU Recutils has security vulnerabilities that can be exploited by attackers to cause segmentation errors or application crashes...

CVE-2021-4171: Undefined Security Weakness

calibre-web is vulnerable to Business Logic Errors...

PT-2022-4183 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView versions prior to 6.6 Description: The issue is related to authentication errors in the HPE OneView IT infrastructure management system. Exploitation of this issue may allow an attacker to gain unauthorized access to protected...

Chaskiq Cross-Site Scripting Vulnerability

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

Calibre-Webs security vulnerabilities

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in calibre-web that stems from the fact that calibre-web is prone to business logic errors...

PT-2022-11465

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Business Logic Errors. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

wireshark Pointer Assignment DoS

The vulnerability of the wireshark traffic analysis program is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Google Chrome Security Update (stable-channel-update-for-desktop-2022-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

GO-2021-0225

Certain invalid inputs to ReadUvarint or ReadVarint could cause those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This could lead to processing more input than expected when the caller is reading directly from a network and depends on...