15 matches found
CVE-2025-46344
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke .setExpirationTime when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While...
CVE-2024-51744
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
AZL-52186 CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
Fedora 39 : tcpreplay (2024-740d26aaf7)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-740d26aaf7 advisory. Announcing v4.5.1 This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do...
CVE-2024-29400
An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...
CVE-2024-29400
An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...
CVE-2024-29400
CVE-2024-29400 affects RuoYi v4.5.1. The vulnerability allows attackers to obtain sensitive information via the status parameter. Public documents (NVD, Red Hat, CNVD, etc.) confirm the affected software and impact description but do not provide root-cause specifics or a guaranteed fix. No exploi...
CVE-2024-29400
An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...
CVE-2021-38243
xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...
CVE-2021-43843
jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch for CVE-2021-43838 in jsx-slack v4.5.1 is insufficient tfor protection from a Regular Expression Denial of Service ReDoS attack. If an attacker can put a lot of JSX elements int...
CVE-2018-1000132
CVE-2018-1000132 affects Mercurial 4.5 and earlier, with an Incorrect Access Control (CWE-285) in the Protocol server that can lead to unauthorized data access over the network. The vulnerability is explicitly stated to have been fixed in Mercurial 4.5.1. Connected advisories reference affected p...
ShopEx Single <= 4.5.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cro...
ShopEx Single 4.5.1 - Multiple Vulnerabilities
ShopEx Single 4.5.1 - Multiple Vulnerabilities Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested...
ShopEx Single 4.5.1 - Multiple Vulnerabilities
Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cross Site Scripting Cross-Site...
ShopEx <= Single V4.5.1 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================ ShopEx = Single V4.5.1 Multiple Vulnerabilities ================================================ Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1...