CVE-2022-4368

The WP CSV WordPress plugin through 1.8.0.0 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, and doe snot have CSRF checks in place as well, leading to a Reflected Cross-Site Scripting...

EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-1124)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amoun...

UBUNTU-CVE-2022-45143

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

PT-2023-13553 · Unknown · Wecube Platform

Name of the Vulnerable Software and Affected Versions: WeCube Platform version 3.2.2 Description: An issue was discovered in WeCube Platform, where multiple CSV injection issues exist. The affected pages include the Home / Admin / Resources page, the Home / Admin / System Params page, and the Hom...

WeCube 安全漏洞

WeCube is a set of open source , one-stop It architecture management and operation and maintenance management tools . Used to simplify the distributed architecture It management , and can be extended through plug-ins . A security vulnerability exists in WeCube Platform version 3.2.2, which stems...

sememos/memos vulnerable to Improper Handling of Values

In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request...

Input validation

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851: Improper Handling of Values

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

Golf may allow attacker to bypass CSRF protections due to weak PRNG

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests...

The vulnerability of Huawei ManageOne, iManager NetEco, and iManager NetEco 6000 management systems lies in the absence of a mechanism to neutralize elements within the CSV file. This allows attackers to execute arbitrary codes.

The vulnerability of Huawei ManageOne, iManager NetEco, and iManager NetEco 6000 management systems lies in the absence of neutralization of certain elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

Design/Logic Flaw

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089 Morgawr Muon handler.clj random values

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089

CVE-2019-25089 affects Morgawr Muon 0.1.1. The vulnerability lies in an unknown functionality within src/muon/handler.clj that leads to insufficiently random values. Exploitation is described as remote. Remediation is available by upgrading to version 0.2.0-indev; the associated patch is c09ed972...

CVE-2019-25089: Use of Insufficiently Random Values

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when parsing random invalid enum strings in the EnumStringValues/EnumExtensions.cs file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...