100 matches found
CVE-2024-41815 Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands
Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with...
AZL-44187 CVE-2023-37329 affecting package gstreamer1-plugins-base 1.20.0-3
GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...
GHSA-8697-479H-5MFP Weaviate denial of service vulnerability
Impact This vulnerability is a type conversion issue that affects users of Weaviate Server versions 1.20.0 and earlier. Who is impacted: Users of Weaviate Server versions 1.20.0 and earlier are impacted by this vulnerability. Patches A patch has been developed for this vulnerability. Patch releas...
Weaviate 安全漏洞
Weaviate is an open source vector database from Weaviate Open Source. A security vulnerability exists in Weaviate version v.1.20.0, which stems from a vulnerability that allows attackers to cause a denial of service DoS via the handleUnbatchedGraphQLRequest function...
WordPress Display WP Admin Pages in the Frontend – WP Frontend Admin Plugin <= 1.20.0 is vulnerable to Cross Site Scripting (XSS)
Software Display WP Admin Pages in the Frontend – WP Frontend Admin Type Plugin Vulnerable versions = 1.20.0 Fixed in 1.21.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 2da048d80366...
Uptime Kuma 跨站脚本漏洞
Uptime Kuma is an easy-to-use, self-hosted monitoring tool from the individual developer Louis Lam. A security vulnerability exists in Uptime Kuma versions prior to 1.20.0, which stems from the Uptime Kuma name parameter allowing persistent XSS attacks...
Uptime Kuma 跨站脚本漏洞
Uptime Kuma is an easy-to-use, self-hosted monitoring tool from Louis Lam Personal Developer. A security vulnerability exists in Uptime Kuma versions prior to 1.20.0 that stems from the Uptime Kuma status page allowing persistent XSS attacks...
SUSE CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
UBUNTU-CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
Design/Logic Flaw
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
CVE-2021-4216
A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...
WordPress plugin Gmedia Photo Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Gmedia Photo Gallerys plugin version 1.20.0 before version 1.20.0 has a cross-site scriptin...
WordPress Gmedia Photo Gallery plugin <= 1.19.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Kaushalendra Dubey in WordPress Gmedia Photo Gallery plugin versions = 1.19.7. Solution Update the WordPress Gmedia Photo Gallery plugin to the latest available version at least 1.20.0...
UniFi Protect <= 1.19.2 CORS Vulnerability
UniFi Protect is prone to a cross-origin resource sharing CORS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
Ubiquiti Networks UniFi Protect 安全漏洞
Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A security vulnerability exists in the UniFi Protect application that allows a malicious actor using malicious code to convince a privileged user to access a URL to take over that user's account. The...
PT-2021-15297 · Ubiquiti · Unifi Protect
Name of the Vulnerable Software and Affected Versions: UniFi Protect versions 1.19.2 and earlier Description: A Cross-Origin Resource Sharing CORS issue allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over the user's account. Recommendation...
Fedora: Security Advisory for nginx (FEDORA-2021-1556d440ba)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Matrix Synapse Injection Vulnerability
Matrix Synapse is a Matrix Management Server implementation from the Matrix.org Foundation in the UK. A security vulnerability exists in Matrix Synapse versions prior to 1.20.0 that allows the use of non-standard NaN, Infinity, and -Infinity JSON values in the fields of the m.room.member event,...
Sensio Labs Twig displayBlock Arbitrary Code Execution Vulnerability
Sensio Labs Twig is a PHP templating engine from the French company Sensio Labs that allows developers to customize tags and filters and create DSLs. An arbitrary code execution vulnerability exists in versions of Sensio Labs Twig prior to 1.20.0, which allows remote attackers to execute arbitrar...