Lucene search
+L

760 matches found

OSV
OSV
added 2024/02/19 6:31 p.m.20 views

GHSA-487G-3M3V-HJHQ Uncontrolled Resource Consumption in moodle

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS7.3AI score0.00944EPSS
SaveExploits0References7
NVD
NVD
added 2024/02/19 5:15 p.m.33 views

CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS7.3AI score0.00944EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/02/19 5:15 p.m.25 views

CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS7.1AI score0.00944EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/19 5:15 p.m.9 views

UBUNTU-CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS5.7AI score0.00944EPSS
SaveExploits0References5
CVE
CVE
added 2024/02/19 4:31 p.m.136 views

CVE-2024-25978

CVE-2024-25978 : Moodle is affected by a denial-of-service risk due to insufficient file size checks in the file picker’s unzip functionality. The available connected documents confirm the vulnerability and its impact but do not provide concrete technical details such as affected versions or exac...

7.5CVSS7.2AI score0.00944EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2024/02/19 4:31 p.m.46 views

CVE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS7.5AI score0.00944EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/02/19 4:31 p.m.23 views

CVE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS6.7AI score0.00944EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2024/02/16 9:30 a.m.4 views

@icanbwell/composite (>=1.89.4, <=1.202.0), @icanbwell/native-components (>=0.21.6, <=0.31.0) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=9.0.1, <=9.1.0)

react-native-document-picker NPM version =9.0.1, =1.89.4, =0.21.6, =0.14.5, =1.1.0, =1.8.0 - @likeminds.community/feed-rn-core 0.6.0 - @likeminds.community/feed-rn-core-beta 0.0.1 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

7.8CVSS7.4AI score0.00535EPSS
SaveExploits0
OSV
OSV
added 2024/02/16 9:30 a.m.13 views

GHSA-PMGM-H3CC-M4HJ React Native Document Picker Directory Traversal vulnerability

Directory Traversal vulnerability in React Native Document Picker before 8.2.2 and 9.x before 9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.3CVSS6.2AI score0.00535EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2024/02/16 9:30 a.m.41 views

React Native Document Picker Directory Traversal vulnerability

Directory Traversal vulnerability in React Native Document Picker before 8.2.2 and 9.x before 9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.8CVSS7AI score0.00535EPSS
SaveExploits0References8Affected Software1
vulnersOsv
vulnersOsv
added 2024/02/16 9:30 a.m.4 views

@kafudev/react-native-shell (>=0.66.4-beta.18, <=0.66.5-beta.8), @likeminds.community/chat-rn-core (>=0.5.0, <=1.0.1) +4 more potentially affected by CVE-2024-25466 via react-native-document-picker (>=8.0.0, <=8.2.0)

react-native-document-picker NPM version =8.0.0, =0.66.4-beta.18, =0.5.0, =0.0.8, =0.0.1, =0.5.0, =0.5.14 - yan-react-hook-form 0.1.7 Source cves: CVE-2024-25466 Source advisory: OSV:GHSA-PMGM-H3CC-M4HJ...

7.8CVSS7.4AI score0.00535EPSS
SaveExploits0
NVD
NVD
added 2024/02/16 9:15 a.m.14 views

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.8CVSS7AI score0.00535EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/16 9:15 a.m.17 views

Directory traversal

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.6AI score0.00535EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/16 12:00 a.m.26 views

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.2AI score0.00535EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/16 12:00 a.m.11 views

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.3AI score0.00535EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/16 12:00 a.m.26 views

CVE-2024-25466

Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component...

7.3CVSS7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/16 12:00 a.m.15 views

PT-2024-20960 · Unknown · React Native Document Picker

Name of the Vulnerable Software and Affected Versions: React Native Document Picker versions prior to 9.1.1 React Native Document Picker version 8.2.2 and earlier Description: A Directory Traversal issue allows a local attacker to execute arbitrary code via a crafted script to the Android library...

7.8CVSS7.7AI score0.00535EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/02/16 12:00 a.m.8 views

React Native Security Vulnerabilities

React Native is an open source JavaScript framework. It is used to build user interfaces and native applications. A security vulnerability exists in React Native Document Picker versions prior to v.9.1.1, which stems from a path traversal vulnerability in the component Android library...

7.8CVSS6.7AI score0.00535EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/16 12:00 a.m.119 views

CVE-2024-25466

CVE-2024-25466 is a directory traversal vulnerability in React Native Document Picker affecting versions prior to 9.1.1 . The root cause is an Android library component that processes crafted scripts, allowing a local attacker to execute arbitrary code. The vulnerability is fixed in version 9.1.1...

7.8CVSS7.2AI score0.00535EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/31 12:00 a.m.12 views

WordPress Location Picker at Checkout for WooCommerce Plugin <= 1.8.9 is vulnerable to Broken Access Control

Software Location Picker at Checkout for WooCommerce Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.9.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24719 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c5ab2992c2e0 Credits...

4.3CVSS6.6AI score0.00318EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder