4327 matches found
PT-2020-22684
Name of the Vulnerable Software and Affected Versions dirs crate affected versions not specified Description The issue concerns the dirs crate, which is no longer maintained. Users are advised to use dirs-next instead. Recommendations At the moment, there is no information about a newer version...
nextdayscience.com Cross Site Scripting vulnerability OBB-1379860
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-22043
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the asn1 get next function, which is called by x509 parse...
Dnxfirewall - A Pure Python Next Generation Firewall Built On Top Of Linux Kernel/Netfilter
DNX Firewall is an optimized/high performance collection of applications or services to convert a standard linux system into a zone based next generation firewall. All software is designed to run in conjunction with eachother, but with a modular design certain aspects can be completely removed wi...
Sandbox bypass vulnerability in script-security
script-security provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are generally safe to execute. Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call is to be allowe...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +108 more potentially affected by unknown CVE via next (>=1.2.3, <=5.0.1-canary.14)
next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.1, =3.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =1.0.2, =0.0.1, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VJ8-3V2H-H38V...
GHSA-5VJ8-3V2H-H38V Remote Code Execution in next
Versions of next prior to 5.1.0 are vulnerable to Remote Code Execution. The /path: route fails to properly sanitize input and passes it to a require call. This allows attackers to execute JavaScript code on the server. Note that prior version 0.9.9 package next npm package hosted a different...
Remote Code Execution in next
Versions of next prior to 5.1.0 are vulnerable to Remote Code Execution. The /path: route fails to properly sanitize input and passes it to a require call. This allows attackers to execute JavaScript code on the server. Note that prior version 0.9.9 package next npm package hosted a different...
PT-2020-21071
Name of the Vulnerable Software and Affected Versions next versions prior to 5.1.0 Description The issue allows for Remote Code Execution due to improper input sanitization in the /path: route, which passes input to a require call. This enables attackers to execute JavaScript code on the server...
IBM Engineering Requirements Management DOORS Next Generation Cross-Site Scripting Vulnerability
IBM Engineering Requirements Management DOORS Next Generation is a requirements management tool that provides a smarter way to define, track, analyze and manage requirements. A cross-site scripting vulnerability exists in IBM Engineering Requirements Management DOORS Next Generation version 7.0,...
Security Bulletin: Multiple vulnerabilities affects IBM Jazz Foundation and IBM Engineering products.
Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...
WordPress quiz-master-next cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. quiz-master-next is a survey plugin used in it. A security vulnerability exists in the php/qmnoptionsquestionstab.php file in WordPres...
Contiki-NG buffer overflow vulnerability (CNVD-2020-49538)
Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer overflow vulnerability exists in Contiki-NG versions 4.4 through 4.5 SNMP agent. The vulnerability stems from a network system or product performing operations on memory witho...
CVE-2020-14936
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocated target-buffer capacity verification when writing parsed OID values. The function snmpoiddecodeoid may overwrite memory areas beyond the provided...
In the GNU C Library (aka glibc or libc6) through 2.29 proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
...
CVE-2016-11085
php/qmnoptionsquestionstab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the questionname parameter because js/adminquestion.js mishandles parsing inside of a SCRIPT element...
CVE-2016-11085
php/qmnoptionsquestionstab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the questionname parameter because js/adminquestion.js mishandles parsing inside of a SCRIPT element...
CVE-2016-11085
php/qmnoptionsquestionstab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the questionname parameter because js/adminquestion.js mishandles parsing inside of a SCRIPT element...
PT-2020-8014
Name of the Vulnerable Software and Affected Versions: Quiz-master-next plugin versions prior to 4.7.9 for WordPress Description: The issue allows for Cross-Site Request Forgery CSRF with resultant stored Cross-Site Scripting XSS via the question name parameter. This occurs because the js/admin...
CVE-2016-11085: Improper Neutralization of Input During Web Page Generation
php/qmnoptionsquestionstab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the questionname parameter because js/adminquestion.js mishandles parsing inside of a SCRIPT element...