Design/Logic Flaw

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

CVE-2024-24761

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

CVE-2024-24761 Galette public pages accessibility restriction

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

CVE-2024-24761 Galette public pages accessibility restriction

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

CVE-2024-24761 Galette public pages accessibility restriction

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to...

BIT-MARIADB-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

GHSA-FFFG-CWC9-XVJ7 mongo-express Cross-site Request Forgery vulnerability

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection...

mongo-express Security Vulnerability

mongo-express is a lightweight, web-based management interface for interactively managing MongoDB databases. A security vulnerability exists in mongo-express version 1.0.2, which stems from the presence of a cross-site request forgery CSRF vulnerability...

GHSA-P4M5-32PR-2HQR PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

Impact Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls missing arguments or wrongly typed arguments and redundant null pointers. Patches The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop...

PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

Impact Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls missing arguments or wrongly typed arguments and redundant null pointers. Patches The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop...

PT-2024-40388 · Pypi · Pypop

Name of the Vulnerable Software and Affected Versions: PyPop versions prior to 1.0.2 Description: Code scanning revealed a possible issue in C extensions for PyPop, involving incorrect function calls, such as missing arguments or wrongly typed arguments, and redundant null pointers...

CVE-2023-6677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection.This issue affects Online Collection: before v.1.0.2...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection.This issue affects Online Collection: before v.1.0.2...

Oduyo Online Collection Software SQL Injection Vulnerability

Oduyo Online Collection Software is a software from Oduyo, Inc. A SQL injection vulnerability exists in versions of Oduyo Online Collection Software prior to v.1.0.2, which stems from incorrect neutralization of a special element...

Malicious code in packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a193d368f6200ab95855825d1922e896fc90579a2dfd5f62350f23cbffb19d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ServerRPExposer Security Vulnerability

ServerRPExposer is an application by Kihron Personal Developer for extracting server resource packages. A security vulnerability exists in ServerRPExposer v.1.0.2 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code via loadServerPack in...

PT-2024-19562 · Unknown · Kihron Serverrpexposer

Name of the Vulnerable Software and Affected Versions: Kihron ServerRPExposer versions 1.0.2 and before Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the loadServerPack in ServerResourcePackProviderMixin.java. This enables the attacker to...

PT-2024-14850 · WordPress · Wp-Adv-Quiz

Name of the Vulnerable Software and Affected Versions: Wp-Adv-Quiz WordPress plugin versions 1.0.2 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, i...

OpenSSL DoS Vulnerability (20240125) - Linux

OpenSSL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

PT-2024-2758 · Jenkins +1 · Jenkins Log Command Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Log Command Plugin versions 1.0.2 and earlier Description: The issue is related to the command parser feature in the Jenkins Log Command Plugin, which replaces an '@' character followed by a file path in an argument with the file's...