Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in versions of Rust derive-com-impl crate prior to 0.1.2, which may result in invalid references and memory corruption...

GHSA-6G47-63MV-QPGH Prototype Pollution in dotty

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

DEBIAN-CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

GHSA-C722-PV5W-CFG2 Malicious Package in github-jquery-widgets

Version 0.1.2 of github-jquery-widgets contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and...

Libnsbmp Buffer Overflow Vulnerability

Libnsbmp is a decoding library for the BMP and ICO image file formats, written in C. It is available as part of the NetSurf project. It is part of the NetSurf project and is available for other software under the MIT license. A buffer overflow vulnerability exists in the 'bmpdecoderle' function o...

DEBIAN-CVE-2015-7508

Heap-based buffer overflow in the bmpdecoderle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file...

Path traversal

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...

libzetta-rs integer overflow vulnerability

libzetta-rs is a stable interface for ZFS programming management. An integer overflow vulnerability exists in the zpool parser in libzetta-rs 0.1.2 and earlier. An attacker could exploit this vulnerability to cause a panic...

Regular Expression Denial of Service in forwarded

Affected versions of forwarded are vulnerable to regular expression denial of service when parsing specially crafted user input. Recommendation Update to version 0.1.2 or later...

SQL Injection in extension "Member Infosheets" (if_membersheet)

It has been discovered that the extension "Member Infosheets" ifmembersheet is susceptible to SQL Injection. Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.1.2 and below...

flask-oidc open redirect vulnerability

flask-oidc is a library for supporting OpenID connections to flask. An open redirection vulnerability exists in flask-oidc 0.1.2 and earlier versions, which can be exploited by an attacker to redirect a user to an arbitrary website and execute a phishing attack...

Project Atomic bubblewrap Local Elevation of Privilege Vulnerability

Project Atomic is a suite of software sponsored by Red Hat that supports the creation and running of applications using Linux and Docker containers. A local elevation of privilege vulnerability exists in Project Atomic bubblewrap version 0.1.2-1, which can be exploited by an attacker to gain...

PYSEC-2016-25

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...

Timing Attack

Overview Affected versions of csrf-lite are vulnerable to timing attacks as a result of testing CSRF tokens via a fail-early comparison instead of a constant-time comparison. Timing attacks remove the exponential increase in entropy gained from increased secret length, by providing per-character...

Regular Expression Denial of Service

Overview Versions of millisecond prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. Proof of concept var ms = require'millisecond'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result ...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gegl-0.1.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vikingboard Viking board 0.1.2 forum.php debug Variable Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is vulnerable; other...

phpQuiz <= 0.1.2 - Remote SQL Injection / Code Execution Exploit

No description provided by source...

nullam blog 0.1.2 (lfi/fd/sql/xss) Multiple Vulnerabilities

No description provided by source. -- Salvatore Fresta aka drosophila CWNP444351 Salvatore drosophila Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS +...