55 matches found
dromara__hutool_CVE-2018-17297_4-1-1111
A set of tools that keep Java sweet. -- 홈페이지: http://hutool.cn/ -- -- QQ 그룹②: 871141901 -- 소개 Hutool은 Java 도구 모음입니다. 단지 도구 모음일 뿐이지만, 모든 코드 줄을 단순화하고 모든 메서드를 줄여 Java 언어도 '달콤하게' 만들어 줍니다. Hutool은 처음에 제 프로젝트의 'util' 패키지를 정리한 것에서 시작했습니다. 이후 점차 비즈니스와 무관한 기능들을 축적하고 추가했으며, 다른 오픈소스 프로젝트의 정수를 폭넓게 배워 직접...
asf__commons-io_CVE-2021-29425_2-6
Apache Commons IO Apache Commons IO 라이브러리에는 유틸리티 클래스, 스트림 구현, 파일 필터, 파일 비교기, 엔디언 변환 클래스 등이 포함되어 있습니다. 문서 더 자세한 정보는 Apache Commons IO 홈페이지에서 확인할 수 있습니다. JavaDoc을 열람할 수 있습니다. Apache Commons IO 사용과 관련된 질문은 사용자 메일링 리스트에 올려 주세요. 최신 릴리스는 어디서 받을 수 있나요? 소스와 바이너리는 다운로드 페이지에서 받을 수 있습니다. 또는 중앙 Maven 저장소에서 가...
CVE-2026-45325 Gestor de Oferta: Prototype pollution in @tmlmobilidade/utils setValueAtPath
Gestor de Oferta is a web application for managing mobility service offerings. Prior to 20260509.0340.15, @tmlmobilidade/utils has a prototype pollution vulnerability in setValueAtPath in packages/utils/src/generic/value-at-path.ts because unsafe path segments are not blocked. This issue is fixed...
OpenBao: LDAPi ldaputil (wrong escape func)
Description Component sdk/helper/ldaputil/client.go — the shared LDAP utility library used by both the LDAP authentication backend and OpenLDAP secrets engine to construct LDAP search filters and bind DNs. Root Cause The LDAP utility contains a function selection error that causes incorrect...
CVE-2026-8360
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface in various DLLs i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll can return a NULL pointer i.e., when no user is logged into the Triofox Server Agent Management Console. The returned NULL pointer is not checked before being...
PT-2026-31820
Name of the Vulnerable Software and Affected Versions Zod jsVideoUrlParser versions up to 0.5.1 Description A weakness exists in Zod jsVideoUrlParser up to version 0.5.1. The issue is related to inefficient regular expression complexity caused by manipulation of the timestamp argument within the...
EUVD-2022-28532
Malicious code in bioql PyPI...
CVE-2023-45827 Prototype Pollution vulnerability in @clickbar/dot-diver
Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the setByPath function which can leads to remote code...
[SECURITY] [DLA 3332-1] apr-util security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3332-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 21, 2023 https://wiki.debian.org/LTS -...
SUSE CVE-2009-1955
The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...
CVE-2021-32821
CVE-2021-32821 affects MooTools (JavaScript utilities). The issue is a vulnerability in MooTools’ CSS selector parser, where a crafted CSS selector can trigger a Regular Expression Denial of Service (ReDoS) at runtime. Exploitation requires injecting a string into a selector (e.g., via runtime qu...
Design/Logic Flaw
Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users are advised to upgrade. There are no...
CVE-2022-41920
Lancet’s Go library (github.com/duke-git/lancet) contains a ZipSlip vulnerability in the fileutil UnZip path when unzipping archives. Affected versions are vulnerable; the issue is addressed with fixes in Lancet v2.1.10 and v1.3.4. Upgrading to these versions or newer is advised. No explicit work...
CVE-2022-41920 Zip slip in Lancet
Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users are advised to upgrade. There are no...
Lodash command injection vulnerability
Lodash is an open source JavaScript utility library. A command injection vulnerability exists in Lodash 4.17.21, which can be exploited by attackers to execute arbitrary code via a template function...
[SECURITY] Fedora 33 Update: nodejs-underscore-1.13.1-1.fc33
Underscore.js is a utility-belt library for JavaScript that provides support for the usual functional suspects each, map, reduce, filter... without extending any core JavaScript objects...
Unspecified vulnerability in 101 applications
101 is an application program . Provides a JS util library. A security vulnerability exists in 101 versions 1.0.0 through 1.6.3, which can be exploited by an attacker to cause a denial of service and potentially lead to remote code execution...
Unspecified vulnerability in 101 applications (CNVD-2021-47376)
101 is an application program . Provides a JS util library. A security vulnerability exists in 101 versions 1.0.0 through 1.6.3, which can be exploited by an attacker to cause a denial of service and potentially lead to remote code execution...