CVE-2026-10802

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumption. It is possible to launch the attac...

PT-2025-29297

Name of the Vulnerable Software and Affected Versions: Artifex GhostPDL versions prior to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145 Description: A problematic issue exists in Artifex GhostPDL related to a null pointer dereference. The issue is located in the pdf ferror function within the...

PT-2025-24558 · Metabase · Metabase

Name of the Vulnerable Software and Affected Versions: Metabase version 54.10 Description: A problematic issue was found in the function parseDataUri of the file frontend/src/metabase/lib/dom.js. This issue leads to inefficient regular expression complexity and can be initiated remotely...

PT-2024-21513 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A problem was found in the system, affecting the /admin/user/index.php file. The issue involves the manipulation of the view argument, leading to cross-site scripting. This can be...

Out-of-bounds

In smsExtractCbLanguage of smsCellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2023-10161 · Unknown · Ad Blocking Detector Plugin

Name of the Vulnerable Software and Affected Versions: Ad Blocking Detector Plugin versions up to 1.2.1 Description: A vulnerability has been found in the Ad Blocking Detector Plugin, affecting unknown code of the file ad-blocking-detector.php. This issue leads to information disclosure and can b...

PT-2022-27686 · Unknown · Luckyshot Crmx

Name of the Vulnerable Software and Affected Versions: luckyshot CRMx affected versions not specified Description: A critical issue was found in luckyshot CRMx, affecting the get/save/delete/comment/commentdelete function of the index.php file. This issue leads to SQL injection and can be initiat...

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

Affiligator Affiliate Webshop Management System SQL Injection Vulnerability

Affiligator Affiliate Webshop Management System is a PHP-based web store management system. A SQL injection vulnerability exists in Affiligator Affiliate Webshop Management System version 2.1.0. A remote attacker can inject SQL commands with the help of search/?q=&pricetype=range&price= requests...

Oracle Primavera Unifier Platform Component Unspecified Remote Issue (January 2018 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is missing the January 2018 Critical Patch Update. It is, therefore, affected by an unspecified issue in the platform component as described in the advisory. %NASLMINLEVEL 703...

Drupal 7.x < 7.44 / 8.1.x < 8.1.3 User Module Account Saving Improper Role Assignment Remote Issue

Binary data 9399.prm...

NS Utilities 1.0 - Unspecified Remote Issue

The NS Utilities WordPress plugin was affected by an Unspecified Remote Issue security vulnerability...

ABC2PS/JCABC2PS 1.2 Voice Field Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12024/info abc2ps and jcabc2ps are prone to a buffer overflow vulnerability. This issue is exposed when the program is used to process the voice field in ABC music notation files. Since the ABC files may originate from an...

Oracle WebCenter Content Server Subcomponent Remote Issue (October 2013 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by an unspecified remote security vulnerability in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw

------------------------------------------------------------------------ Debian Security Advisory DSA-1275-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : zope2.7 Vulnerability...

[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 686-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 499-1] New rsync packages fix directory traversal bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 499-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-347-1] New teapop packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 347-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 213-1] New libpng packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 213-1 [email protected] http://www.debian.org/security/ Martin Schulze December 19th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 186-1] New log2mail packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 186-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2002 http://www.debian.org/security/faq -...