Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter requesterid that can lead to SQL...

CVE-2024-12123 Unauthorized Modification of Ticket Requester

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

CVE-2024-12123

CVE-2024-12123 affects Issuetrak v17.1. A hidden field manipulation flaw allows an authenticated user submitting a ticket to have the request intercepted and modified via a proxy, changing the ticket requester to another user in the same application, which the app accepts. The issue is described ...

CVE-2024-12123: External Control of Assumed-Immutable Web Parameter

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

wildfly-security-manager: security manager authorization bypass

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks...

Malicious code in api-requester2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4770 Malicious code in api-requester2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-26118 · Unknown · Createwiki

Name of the Vulnerable Software and Affected Versions: CreateWiki affected versions not specified Description: The issue allows users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki...

PT-2025-40681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s RDMA/rxe component where incomplete state saving in the rxe requester function can lead to corrupted resent packets under heavy stress testing...

Input validation

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that...

com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.4.0)

org.jenkins-ci.plugins:git MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0.0, =1.0, =1.1.0, =1.33.2, =1.0,...

Malicious code in plywood-clickhouse-requester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d749af061ec8b1d350c3b326fe3b7a722430d03538a5196d7c59bcaa919f8ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5377 Malicious code in plywood-clickhouse-requester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d749af061ec8b1d350c3b326fe3b7a722430d03538a5196d7c59bcaa919f8ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-31796

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use...

libjpeg 缓冲区错误漏洞

libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A security vulnerability exists in libjpeg version 1.63, which stems from a heap-based buffer overread in HierarchicalBitmapRequester::FetchRegion in...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), com.redhat.jenkins.plugins:build-requester (0.7) +4 more potentially affected by CVE-2021-21698 via org.jenkins-ci.plugins:subversion (1.45)

org.jenkins-ci.plugins:subversion MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =0.34, =1.514, =1.12, =1.13 -...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), com.redhat.jenkins.plugins:build-requester (0.7) +4 more potentially affected by CVE-2020-2111 via org.jenkins-ci.plugins:subversion (1.45)

org.jenkins-ci.plugins:subversion MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =0.34, =1.514, =1.12, =1.13 -...

com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.18.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0, =1.1.0, =1.33.2, =1.0...

CVE-2022-26317

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.29. When returning the result of a completed Microflow execution call the affected framework does not correctly verify, if the request was initially made by the user requesting the result. Together with...

DEBIAN-CVE-2021-39520

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service...