184 matches found
openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-3711 via openssl-src (=110.0.7+1.1.0i)
openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-3711 Source advisory: OSV:RUSTSEC-2021-0097...
complaintclassify (=0.0.9) potentially affected by CVE-2021-37666 via tensorflow-cpu (=2.4.0)
tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-37666 Source advisory: OSV:PYSEC-2021-579...
CVE-2020-9273
creationtimestamp| type| source ---|---|--- 2021-08-10 17:45:17+00:00| published-proof-of-concept| Telegram/EshvxTBzDj9BA-rtoAPVbndHWSd4zkw70GiVoNCz-Z94Wo 2023-12-02 02:53:38+00:00| seen| https://t.me/arpsyndicate/884 2024-03-13 13:46:38+00:00| published-proof-of-concept|...
eth-brownie (=1.15.0) potentially affected by unknown CVE via vyper (=0.2.14)
vyper PYPI version =0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on vyper and may be impacted: - eth-brownie =1.15.0 Source cves: unknown CVE Source advisory: OSV:GHSA-7F92-RR6W-CQ64...
CVE-2020-36239
creationtimestamp| type| source ---|---|--- 2021-07-22 08:36:14+00:00| seen| https://t.me/cKure/6261 2021-07-22 18:24:23+00:00| seen| https://t.me/BleepingComputer/10187 2021-07-29 14:14:13+00:00| seen| https://t.me/cibsecurity/26565 2021-08-04 11:28:13+00:00| published-proof-of-concept|...
CVE-2021-30713
creationtimestamp| type| source ---|---|--- 2021-05-25 08:39:19+00:00| exploited| https://t.me/SecLabNews/10258 2021-05-25 12:03:30+00:00| exploited| https://t.me/truesecator/1747 2021-05-25 12:39:33+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus17/2021 2021-05-27...
c4v-py (>=0.1.0.dev1 <=0.1.0.dev202107081840) potentially affected by CVE-2021-29596 via tensorflow-cpu (=2.3.1)
tensorflow-cpu PYPI version =2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2021-29596 Source advisory: OSV:GHSA-4VRF-FF7V-HPGR...
Logic Flaw Vulnerability in ZZCMS Backend
ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS back-end logic flaws vulnerabilities. Attackers can use the vulnerability to perform unauthorized...
complaintclassify (=0.0.9) potentially affected by CVE-2021-29520 via tensorflow-cpu (=2.4.0)
tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-29520 Source advisory: OSV:PYSEC-2021-448...
axosnake (>=0.1.0 <=0.1.4), bevy_rapier2d (>=0.1.1 <=0.4.0) +22 more potentially affected by unknown CVE via ncollide2d (>=0.15.4 <=0.33.0)
ncollide2d CARGO version =0.15.4, =0.1.0, =0.1.1, =0.0.0, =0.14.0, =0.0.1, =0.1.0, =0.15.3, =0.8.0, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.46.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0151...
aglvq (=1.0.0), beacon-trellis (=0.1.0) +64 more potentially affected by CVE-2020-26271 via tensorflow (>=2.1.0 <=2.1.2)
tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.0.2, =0.1.0, =1.1.0, =0.2.0rc1, =0.2.0rc3 and more Source cves: CVE-2020-26271 Source advisory: OSV:PYSEC-2020-257...
a3m (=0.1.0), acdh-collatex-utils (>=0.2.0 <=1.2.0) +542 more potentially affected by CVE-2020-27783 via lxml (>=3.2.3 <=4.6.1)
lxml PYPI version =3.2.3, =0.2.0, =1.0.0, =3.0.0, =0.1.0, =1.0.3, =1.0.0a1.post0, =1.10.0, =0.1.16, =0.7.2, =1.0.1, =1.0.3 and more Source cves: CVE-2020-27783 Source advisory: OSV:PYSEC-2020-62...
fleek-response (>=0.4.2 <=0.4.3), fleek-router (>=0.4.2 <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0 <=2.0.9)
swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-V4X8-GW49-7HV4...
@ardibos/taekbos (=1.1.4), @conlan2/cmpt315as2 (>=1.0.0 <=1.0.1) +8 more potentially affected by unknown CVE via public (=0.1.5)
public NPM version =0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on public and may be impacted: - @ardibos/taekbos =1.1.4 - @conlan2/cmpt315as2 =1.0.0, =1.0.8, =0.1.0, =0.1.2 - weektwoabc =1.0.0 - wjwrk9 =1.0.1 - yyjchhym =1.0.0 Source cves:...
com.github.davidmoten:odata-client-test-olingo-trip-pin (=0.2.6), com.github.davidmoten:odata-client-test-report (>=0.1.14 <=0.2.5) +1 more potentially affected by CVE-2019-17556 via org.apache.olingo:odata-client-proxy (>=4.0.0 <=4.6.0)
org.apache.olingo:odata-client-proxy MAVEN version =4.0.0, =0.1.14, =4.0.0, =4.10.0 Source cves: CVE-2019-17556 Source advisory: OSV:GHSA-GJ76-429M-56WC...
Arbitrary file deletion vulnerability in Bacardi CMS pi***.php page
Bacardi CMS micro-mall is a free and open source object-oriented multi-store multi-user micro-mall PHP development framework , created in June 2014 , follow the Apache Licence2 open source agreement released , is to quickly simplify the development of enterprise micro-mall applications , to help...
aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30803 more potentially affected by CVE-2019-14439 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9.1)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-14439 Sour...
Mozilla Firefox Incorrect Source Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 66, which stems from a privilege notification that fails to properly display the originating domain when requesting WebRTC...