CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

PT-2025-43528

Name of the Vulnerable Software and Affected Versions Audiofile version 0.3.7 Description The software contains a NULL pointer dereference within the ModuleState::setup function. This can lead to unexpected behavior or a denial of service. Recommendations Update to a newer version that contains a...

CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

EUVD-2025-9051

Malicious code in bioql PyPI...

CVE-2025-9148 CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

CVE-2025-9148

CVE-2025-9148 affects CodePhiliaX Chat2DB up to 0.3.7, specifically the JDBC Connection Handler’s DataSourceController.java. The vulnerability is a SQL injection in an unknown function of that file, enabling remote exploitation. Public exploits have been disclosed. Multiple sources corroborate re...

CodePhiliaX Chat2DB 注入漏洞

CodePhiliaX Chat2DB is an AI-driven SQL client from CodePhiliaX open source. CodePhiliaX Chat2DB 0.3.7 and earlier versions have an injection vulnerability that stems from a SQL injection vulnerability in the file DataSourceController.java in the component JDBC Connection Handler...

gifplayer XSS vulnerability

Impact XSS vulnerability. All versions under 0.3.7 are impacted Patches Please upgrade to 0.3.7...

CVE-2025-31128

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting XSS vulnerability. This vulnerability is fixed in 0.3.7...

CVE-2025-31128 gifplayer XSS vulnerability

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting XSS vulnerability. This vulnerability is fixed in 0.3.7...

CVE-2025-31128 gifplayer XSS vulnerability

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting XSS vulnerability. This vulnerability is fixed in 0.3.7...

CVE-2025-31128 gifplayer XSS vulnerability

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting XSS vulnerability. This vulnerability is fixed in 0.3.7...

PT-2023-32968 · Unknown · Rustls-Webpki

Name of the Vulnerable Software and Affected Versions: rustls-webpki versions prior to 0.3.7 Description: The issue arises during startup when an attacker can intercept traffic to and from NTS key exchange servers, triggering an expensive key validation process due to a vulnerability in webpki...

GHSA-VXMM-CWH2-Q762 Vyper's nonpayable default functions are sometimes payable

Impact in contracts with at least one regular nonpayable function, due to the callvalue check being inside of the selector section, it is possible to send funds to the default function by using less than 4 bytes of calldata, even if the default function is marked nonpayable. this applies to...

SUSE CVE-2020-35905

An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations in safe code...

AZL-45375 CVE-2021-38561 affecting package containernetworking-plugins for versions less than 1.6.1-4

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack...

GHSA-4J54-MXF6-WXX2 OS Command Injection in pomelo-monitor

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

Content injection in marked

Versions 0.3.7 and earlier of marked When mangling is disabled via option mangle don't escape target href. This allow attacker to inject arbitrary html-event into resulting a tag...

SQL Injection Vulnerability in Jinwei Mobile Mall v0.3.7

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...