12061 matches found
GHSA-X5CW-843F-R366 x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting
All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting XSS due to missing sanitization of values inserted into the cells...
PT-2022-37232 · Git +1 · Cras
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: dbus marshal write basic, dbus type write...
PT-2022-23607 · D Link · D-Link Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR845L version A1 Description: The issue concerns an authentication vulnerability. It can be exploited via an AUTHORIZED GROUP=1 value. This is demonstrated by sending a request for "getcfg.php", an API endpoint. Recommendations: For...
There is no validation of DynamicQuorumParams.quorumCoefficient.
Lines of code Vulnerability details Impact There is no validation of DynamicQuorumParams.quorumCoefficient and any value can be used during this calculation. Proof of Concept As we can see from the comment, quorumCoefficient should be an integer with 6 decimals but there is no require for this...
check if the refundGas() is successful or not
Lines of code Vulnerability details The user can lose their refundAmount in the transaction field Recommended Mitigation Steps Add check bool refundSent, = msg.sender.call value: refundAmount ''; requirerefundSent, "Transfer failed."; --- The text was updated successfully, but these errors were...
GNOME Anjuta DevStudio 信息泄露漏洞
GNOME Anjuta DevStudio is a versatile integrated development environment IDE based on the GNOME desktop environment and features many advanced programming tools. A security vulnerability exists in GNOME Anjuta DevStudio that stems from its anjuta/plugins/document-manager/anjuta-bookmarks.c...
CVE-2021-42521
There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...
CVE-2021-3998
A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...
Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-36031 Unhandled exception on illegal filename_disk value
Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the filenamedisk value to a folder and accessing that file through the /assets endpoint. This vulnerability has been patched and release v9.15....
CVE-2022-23459
Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may poin...
CVE-2022-23459 Double free or Use after Free in Value class of Jsonxx
Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may poin...
CVE-2022-29805
creationtimestamp| type| source ---|---|--- 2022-08-19 16:17:26+00:00| seen| https://t.me/cibsecurity/48435...
OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
PT-2022-16001 · Jsonxx · Jsonxx
Name of the Vulnerable Software and Affected Versions: jsonxx affected versions not specified Description: The issue is related to the use of the Value class in jsonxx, which may lead to memory corruption via a double free or a use after free. This occurs because the Value class has a default...
Jsonxx 资源管理错误漏洞
Jsonxx is a lightweight Json parser, writer, and reader written in C++ by the individual developer Hong Jiang in China. A resource management error vulnerability exists in Jsonxx, which stems from the Value class that may cause memory corruption through double release or reuse after release...
Design/Logic Flaw
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
