EUVD-2022-50661

Malicious code in bioql PyPI...

EUVD-2022-50660

Malicious code in bioql PyPI...

CVE-2022-47924

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...

CVE-2022-47925

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected b...

CVE-2022-47924

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...

CVE-2022-47925

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected b...

CVE-2022-47924 Arbitrary Code Execution using the validate function of csaf-validator-lib

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...

CVE-2022-47924 Arbitrary Code Execution using the validate function of csaf-validator-lib

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...

CVE-2022-47924

CVE-2022-47924 affects Secvisogram (locally installed) through the csaf-validator-lib.validate function. Vulnerable are versions prior to 0.1.0 where crafted arguments can enable an attacker with high privileges to trigger arbitrary code execution and cause a Denial of Service when a user runs th...

CVE-2022-47925 Insufficient Input Validation in the Endpoint of the csaf-validator-service

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected b...

CVE-2022-47925

The CVE-2022-47925 affects the Secvisogram csaf-validator-service prior to version 0.1.0. The Vulnerability is in the validate JSON endpoint where insufficient input validation allows an unauthenticated remote user to cause a partial DoS of the service by sending tests with unexpected names. Per ...

Secvisogram 输入验证错误漏洞

Secvisogram is a web tool from Secvisogram open source. It is used to create and edit security advisories in CSAF 2.0 format. An input validation error vulnerability exists in versions prior to Secvisogram 0.1.0. An attacker exploiting this vulnerability could execute arbitrary code and cause a...

PT-2023-15530 · Secvisogram · Csaf-Validator-Service

Name of the Vulnerable Software and Affected Versions: Secvisogram csaf-validator-service versions prior to 0.1.0 Description: The issue is related to insufficient input validation of requests by an unauthenticated remote user, which might lead to a partial Denial of Service DoS of the service...

PT-2023-15529 · Unknown · Csaf-Validator-Lib +1

Name of the Vulnerable Software and Affected Versions: Secvisogram versions prior to 0.1.0 Description: An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib which can result in arbitrary code execution and Denial of Service DoS once the user trigge...

Secvisogram csaf-validator-service 输入验证错误漏洞

Secvisogram is a web tool from Secvisogram open source. It is used to create and edit security advisories in CSAF 2.0 format. An input validation error vulnerability exists in Secvisogram csaf-validator-service versions prior to 0.1.0, which stems from insufficient input validation. An attacker...