Stirling-PDF 安全漏洞

Stirling-PDF is a powerful, locally hosted, web-based PDF manipulation tool using Docker, open-sourced by Stirling Tools. A security vulnerability exists in Stirling-PDF version 0.35.1, which stems from vulnerability to a server-side request forgery attack that allows an attacker to access...

PT-2024-36472 · Unknown · Stirling-Pdf

Name of the Vulnerable Software and Affected Versions: Stirling-PDF version 0.35.1 Description: A Server-Side Request Forgery SSRF issue in the endpoint "http://your-server/url-to-pdf" of Stirling-PDF allows attackers to access sensitive information via a crafted request. This enables attackers t...

Fedora 41 : kitty (2024-d2ec3e14a7)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d2ec3e14a7 advisory. Automatic update for kitty-0.35.1-4.fc41. Changelog Mon Jun 17 2024 Pavel Solovev - 0.35.1-4 - rebuild for rhbz2292712 Tenable has extracted the preceding...

CVE-2022-3971

A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file src/datastore/postgres/PgDataStore.ts. The manipulation of the argument roomIds leads to sql injection. Upgrading to version 0.36.0 is able to...

wasmtime-cli (>=0.35.0 <=0.35.1) potentially affected by CVE-2022-24791 via wasmtime (>=0.35.0 <=0.35.1)

wasmtime CARGO version =0.35.0, =0.35.0, =0.35.1 Source cves: CVE-2022-24791 Source advisory: OSV:GHSA-GWC9-348X-QWV2...

PYSEC-2020-224

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed passwords, by accessing an unused and undocumented API endpoint on Apache Superset...

cherry music Arbitrary File Disclosure Vulnerability

cherry music is a music product. An arbitrary file disclosure vulnerability exists in cherry music version 0.35.1, which allows an attacker to download arbitrary files without authentication...