PT-2022-24526 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Sanitization Management System. The issue is related to an unknown function of the file...

@a11ywatch/a11ywatch (>=0.1.0 <=0.1.65), @a11ywatch/core (>=0.4.52 <=0.5.158) +11 more potentially affected by unknown CVE via apollo-server-core (>=3.10.0 <=3.10.4)

apollo-server-core NPM version =3.10.0, =0.1.0, =0.4.52, =0.1.0-alpha.0, =0.1.0-alpha.1, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =10.7.1, =9.0.0, =2.0.0-beta.7, =1.0.0, =4.13.1, =1.3.0-beta.2, =2.0.0-beta.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8R69-3CVP-WXC3...

aadinspector (>=1.0.0 <=1.1.6), accomate (>=1.0.4 <=2.0.0rc0) +398 more potentially affected by unknown CVE via cryptography (>=37.0.0 <=38.0.2)

cryptography PYPI version =37.0.0, =1.0.0, =1.0.4, =1.161.2, =0.2.0, =3.0.1, =3.0.2, =1.3.0, =2.2.1, =2022.9.0b2, =0.3.0, =0.8.0a3, =0.0.1, =0.0.2 - applepassgenerator-reloaded =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-39HC-V87J-747X...

czkawka_gui_orbtk (>=1.0.1 <=1.5.1), orbtk-simple-modal (=0.1.0) +1 more potentially affected by unknown CVE via orbtk (>=0.1.9 <=0.3.1-alpha3)

orbtk CARGO version =0.1.9, =1.0.1, =0.1.0, =0.1.10 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0060...

addr2line (=0.7.0), aether (>=0.0.1 <=0.0.3) +360 more potentially affected by unknown CVE via parity-wasm (>=0.17.0 <=0.45.0)

parity-wasm CARGO version =0.17.0, =0.0.1, =0.1.0, =0.26.1, =0.3.10, =0.0.1, =0.0.0, =0.0.1, =0.1.0, =0.4.1, =0.1.0, =0.2.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0061...

011xwztpjn (=1.0.0), 02y9dg4qm3 (=1.0.0) +14305 more potentially affected by unknown CVE via d3-color (>=0.2.3 <=3.0.1)

d3-color NPM version =0.2.3, =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - 011xwztpjn =1.0.0 - 02y9dg4qm3 =1.0.0 - 04tw75kmd9 =1.0.0 - 0650teqqly =1.0.0 - 097oi25ils =1.0.0 - 0a0fpniotn =1.0.0 - 0c7j76u46q =1.0....

d8s-dates (=0.1.0) potentially affected by unknown CVE via democritus-timezones (=2021.1.201)

democritus-timezones PYPI version =2021.1.201 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-timezones and may be impacted: - d8s-dates =0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSTIMEZONES-8400832...

d8s-timer (=0.1.0) potentially affected by unknown CVE via democritus-dates (=2021.2.1101)

democritus-dates PYPI version =2021.2.1101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-dates and may be impacted: - d8s-timer =0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDATES-8400836...

d8s-strings (=0.1.0), d8s-timer (=0.1.0) potentially affected by unknown CVE via democritus-uuids (=2021.1.2101)

democritus-uuids PYPI version =2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-uuids and may be impacted: - d8s-strings =0.1.0 - d8s-timer =0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSUUIDS-8400829...

d8s-asns (=0.1.0), d8s-domains (=0.1.0) +8 more potentially affected by unknown CVE via democritus-json (=2021.1.2501)

democritus-json PYPI version =2021.1.2501 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-json and may be impacted: - d8s-asns =0.1.0 - d8s-domains =0.1.0 - d8s-html =0.1.0 - d8s-ip-addresses =0.1.0 - d8s-mpeg =0.1.0 - d8s-networking =0.1.0 ...

d8s-asns (=0.1.0), d8s-domains (=0.1.0) +8 more potentially affected by unknown CVE via democritus-user-agents (=2021.1.2101)

democritus-user-agents PYPI version =2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-user-agents and may be impacted: - d8s-asns =0.1.0 - d8s-domains =0.1.0 - d8s-html =0.1.0 - d8s-ip-addresses =0.1.0 - d8s-mpeg =0.1.0 -...

d8s-urls (=0.1.0) potentially affected by unknown CVE via democritus-domains (=2021.1.2101)

democritus-domains PYPI version =2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-domains and may be impacted: - d8s-urls =0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDOMAINS-8400830...

accrete (>=0.1.7 <=0.2.0), adana-script-wasm (>=0.16.5-rc.1 <=0.17.10) +322 more potentially affected by unknown CVE via wee_alloc (>=0.1.0 <=0.4.5)

weealloc CARGO version =0.1.0, =0.1.7, =0.16.5-rc.1, =0.1.0, =0.4.0, =0.1.1, =0.1.2, =1.4.0, =0.1.0, =0.2.8 - biscuit-wasm =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RC23-XXGQ-X27G...

accepted (>=0.2.0 <=0.3.2), aigc_api (=5.1.2) +507 more potentially affected by unknown CVE via typemap (=0.3.3)

typemap CARGO version =0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VFV3-9W6V-23JP...

acari-lib (>=0.1.1 <=0.1.8), accepted (>=0.2.0 <=0.3.2) +1885 more potentially affected by unknown CVE via traitobject (>=0.0.1 <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi =5.1.2 - aigcchain =5.1.2 - aigcconfig =5.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-PP8R-VV2J-9J5V...

async-notify (>=0.5.17 <=0.6.3), async-sender (>=1.3.0 <=1.4.4) +11 more potentially affected by unknown CVE via aiosmtplib (>=1.0.3 <=1.1.6)

aiosmtplib PYPI version =1.0.3, =0.5.17, =1.3.0, =0.0.3, =0.39.0, =0.2.3, =0.0.1, =0.1.1, =1.0.4, =2024.10.27.post1, =0.9.0, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-AIOSMTPLIB-3042406...

6brain (>=0.0.1 <=0.0.2), 6sense (>=0.0.1 <=1.1.5) +1841 more potentially affected by unknown CVE via moment-timezone (>=0.1.0 <=0.5.34)

moment-timezone NPM version =0.1.0, =0.0.1, =0.0.1, =4.11.0, =4.13.7-rc4, =1.70.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-56X4-J7P9-FCF9...

6brain (>=0.0.1 <=0.0.2), 6sense (>=0.0.1 <=1.1.5) +1841 more potentially affected by unknown CVE via moment-timezone (>=0.1.0 <=0.5.34)

moment-timezone NPM version =0.1.0, =0.0.1, =0.0.1, =4.11.0, =4.13.7-rc4, =1.70.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V78C-4P63-2J6C...

PT-2022-23576 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Section parameter at the "/librarian/lab.php" API endpoint. Recommendations: For Library...

alass-util (=0.3.0), assembly-data (>=0.2.0 <=0.3.0-beta.0) +57 more potentially affected by unknown CVE via mapr (=0.8.0)

mapr CARGO version =0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mapr and may be impacted: - alass-util =0.3.0 - assembly-data =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.101.0, =0.37.0, =0.101.0, =0.4.0, =0.37.0, =0.40.0, =0.40.0,...