Sahellebusch Flattenizer Security Vulnerability

Sahellebusch Flattenizer is a code library for flattening object variables based on the Javascript language by the individual developer Sahellebusch. A security vulnerability exists in flattenizer versions 0.0.5 through 1.0.5, which can be exploited by an attacker to cause a denial of service and...

React Atomic Organism Security Vulnerability

React Atomic Organism is a codebase from the React Atomic team used to provide atomicity support for React applications. A security vulnerability in React Atomic Organism set-object-value versions 0.0.0 through 0.0.5 allows attackers to exploit the vulnerability for denial of service and...

Dominictarr Libnested Security Vulnerability

Dominictarr Libnested is a codebase from the Dominictarr individual developer that provides map, each, get, set, keys functions for base nested objects. A security vulnerability exists in libnested versions 0.0.0 through 1.5.0 that can be exploited by an attacker to cause a denial of service and...

CVE-2020-29242

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame...

CVE-2020-29242

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame...

CVE-2020-29245

dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData...

CVE-2020-29243

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame...

Design/Logic Flaw

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame...

CVE-2020-29244

The CVE-2020-29244 entry concerns the Go library github.com/dhowden/tag. It is triggered by improper bounds checking in functions such as readTextWithDescrFrame (and related readPICFrame/readAtomData paths), causing a panic: runtime error: slice bounds out of range. Exposures reported as a Denial...

CVE-2020-29244

dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame...

CVE-2020-29243

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame...

CVE-2020-29243

CVE-2020-29243 affects the Go package github.com/dhowden/tag. The issue is an out-of-bounds read panic triggered in readAPICFrame (and related code paths) that can cause a denial of service. Several connected advisories (GHSA entries and OSV notes) describe improper bounds checking across methods...

CVE-2020-29242

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame...

Joomla! 输入验证错误漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An ACL write conflict vulnerability exists in Joomla! 1.7.0-3.9.22. The...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library by the Dhowden personal developer. A security vulnerability exists in dhowden tag versions prior to 2020-11-19, which allows "panic: runtime error: index out of range" to be passed through readPICFrame...

PT-2020-17362 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered where the autosuggestion feature of com finder did not respect the access level of the corresponding terms. Recommendations: For Joomla! versions 2.5.0 through 3.9.22,...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library by the Dhowden personal developer. A security vulnerability exists in dhowden tag versions prior to 2020-11-19, which allows "panic: runtime error: index out of range" to be read via readAPICFrame...

Jiransecurity Spamsniper Buffer Overflow Vulnerability

Jiransecurity Spamsniper is an integrated multifunctional e-mail security software from Jiransecurity, Korea. The software is equipped with features such as blocking spam, virus emails, anti-scam, mail server protection, management, archiving, and more. A buffer overflow vulnerability exists in...

CVE-2020-7845

Spamsniper 5.0 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet...

CVE-2020-9439

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...