Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-4968

Malware in sbrugna...

7.5CVSS8.5AI score0.02675EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-6882

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00431EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:12 p.m.3 views

CVE-2022-36061

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

9.8CVSS6.6AI score0.00431EPSS
Exploits1
OSV
OSV
added 2022/09/06 8:35 p.m.11 views

CVE-2022-36061 Elrond go can execute on same context checks in VM

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

6.5CVSS8.9AI score0.00431EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/09/06 8:35 p.m.4 views

CVE-2022-36061 Elrond go can execute on same context checks in VM

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

6.5CVSS9.4AI score0.00431EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.1 views

PT-2022-23150 · Elrond · Elrond-Go

Name of the Vulnerable Software and Affected Versions: Elrond go versions prior to 1.3.35 Description: The issue concerns read-only calls between contracts in the Elrond Network protocol, which can generate smart contract results and alter the state of the called contract as if the call was not...

9.8CVSS7.2AI score0.00431EPSS
Exploits1References9
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.2 views

Elrond go 安全漏洞

Elrond go is an open source go implementation of the Elrond Network protocol by Elrond Network. Elrond go version 1.3.35 before a security vulnerability , the vulnerability stems from the read-only calls between contracts can generate smart contract results...

9.8CVSS8.2AI score0.00431EPSS
Exploits1References4
OSV
OSV
added 2020/05/06 3:15 a.m.0 views

UBUNTU-CVE-2020-12672

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c...

7.5CVSS7.4AI score0.02675EPSS
Exploits1References5
CNVD
CNVD
added 2020/05/06 12:0 a.m.2 views

GraphicsMagick Buffer Overflow Vulnerability (CNVD-2020-35476)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the ReadMNGImage of the oders/png.c file in GraphicsMagick 1.3.35 and prior versions, which stems from not properly...

7.5CVSS9.5AI score0.02675EPSS
Exploits1References1
OSV
OSV
added 2020/03/24 4:15 p.m.0 views

UBUNTU-CVE-2020-10938

GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c...

9.8CVSS7.5AI score0.02532EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2020/03/24 12:0 a.m.3 views

PT-2020-6211 · Graphicsmagick +4 · Graphicsmagick +4

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions prior to 1.3.35 Description: The issue is related to an integer overflow and resultant heap-based buffer overflow in the HuffmanDecodeImage function in magick/compress.c. This can allow a remote attacker to access...

9.8CVSS7.1AI score0.05098EPSS
Exploits12References86
Patchstack
Patchstack
added 2020/03/12 12:0 a.m.22 views

WordPress Appointment Booking Calendar <= 1.3.34 - CSV Injection vulnerability

CSV Injection vulnerability discovered by Daniel Monzon in WordPress Appointment Booking Calendar plugin versions = 1.3.34. Solution Update the WordPress Appointment Booking Calendar to the latest available version at least 1.3.35...

7.8CVSS3.1AI score0.1934EPSS
Exploits5References3Affected Software1
OSV
OSV
added 2020/03/04 7:15 p.m.0 views

CVE-2020-9371

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabcappointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML...

4.8CVSS6.6AI score
Exploits0References5
Apache Httpd
Apache Httpd
added 2006/05/01 12:0 a.m.125 views

Apache Httpd < 1.3.35 : Expect header Cross-Site Scripting

A flaw in the handling of invalid Expect headers. If an attacker can influence the Expect header that a victim sends to a target site they could perform a cross-site scripting attack. It is known that some versions of Flash can set an arbitrary Expect header which can trigger this flaw. Not marke...

4.3CVSS1.2AI score0.91373EPSS
Exploits7Affected Software1
Rows per page
Query Builder