538 matches found
SUSE CVE-2019-5477
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizerloadfile is being called with unsafe user input as the filename. This...
SUSE CVE-2021-30470
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2023-1205)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2022-46742 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2022-46742...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2022-46741 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2022-46741...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2022-46742 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2022-46742...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2022-46742 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2022-46742...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2022-45908 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2022-45908...
purewords (0.1.1), tokenizer-hub (0.0.1) potentially affected by CVE-2022-21797 via joblib (0.12.2)
joblib PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - purewords 0.1.1 - tokenizer-hub 0.0.1 Source cves: CVE-2022-21797 Source advisory: OSV:GHSA-6HRG-QMVC-2XH8...
purewords (0.1.1), tokenizer-hub (0.0.1) potentially affected by CVE-2022-21797 via joblib (0.12.2)
joblib PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - purewords 0.1.1 - tokenizer-hub 0.0.1 Source cves: CVE-2022-21797 Source advisory: OSV:PYSEC-2022-288...
Debian dla-3107 : lemon - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3107 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3107-1 [email protected]...
OESA-2022-1876 sqlite security update
SQLite is a C-language library that implements a small, fast, self-contained,high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...
Insecure Token
An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" class Cc, was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later...
SQLite has an unspecified vulnerability (CNVD-2022-62234)
SQLite is a lightweight database that is an ACID-compliant relational database management system. SQLite has a security vulnerability that stems from the fts5UnicodeTokenize function of its ext/fts5/fts5tokenize.c component that handles unicode " control-characters" class Cc of the unicode61...
CVE-2022-25758
A flaw was found in the scss-tokenizer package. Affected versions of this package are vulnerable to a regular expression denial of service ReDoS attacks...
Regular Expression Denial Of Service (ReDoS)
scss-tokenizer is vulnerable to regular expression denial of service. The vulnerability exists in the loadAnnotation function of previous-map.js due to the insecure regex pattern used in the match attribute, allowing an attacker to crash the application by providing malicious input...
GHSA-7MWH-4PQV-WMR8 Regular expression denial of service in scss-tokenizer
All versions of the package scss-tokenizer prior to 0.4.3 are vulnerable to Regular Expression Denial of Service ReDoS via the loadAnnotation function, due to the usage of insecure regex...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17622 more potentially affected by CVE-2022-25758 via scss-tokenizer (>=0.1.2, <=0.4.2)
scss-tokenizer NPM version =0.1.2, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2022-25758 Source advisory: GHSA-7MWH-4PQV-WMR8...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 08cms (1.0.0) +17622 more potentially affected by CVE-2022-25758 via scss-tokenizer (>=0.1.2, <=0.4.2)
scss-tokenizer NPM version =0.1.2, =1.0.1, =1.0.4, =1.0.3, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.276 - 5coder-pages 0.2.0 and more Source cves: CVE-2022-25758 Source advisory: OSV:GHSA-7MWH-4PQV-WMR8...