CVE-2025-31337

CVE-2025-31337 セキュリティアドバイザリ CVE ID: CVE-2025-31337 公開日: 2025-03-15 CVSSスコア: 9.8 重大 CWE: CWE-120 入力サイズをチェックしないバッファコピー 説明 AIDR ChatBot Framework バージョン 4.2.0 以前に、重大なバッファオーバーフロー脆弱性が見つかりました。この脆弱性は generateresponse 関数に存在し、処理前にユーザーが提供した CVE 詳細を適切にサニタイズしないことに起因します。攻撃者は、期待されるバッファ長を超える特別に細工された CVE...

EUVD-2022-39021

Malicious code in bioql PyPI...

CVE-2022-36304

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...

Cross site scripting

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-36304

CVE-2022-36304 affects Vesta Control Panel (VestaCP) v1.0.0-5. The issue is a cross-site scripting (XSS) flaw in the generate_response function at /web/api/v1/upload/UploadHandler.php. Exploitation requires user interaction; successful payloads could impact confidentiality and integrity (both rat...

CVE-2022-36304: Improper Neutralization of Input During Web Page Generation

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...