Lucene search
+L

536 matches found

OSV
OSV
added 2023/05/10 6:15 a.m.5 views

UBUNTU-CVE-2023-2617

A vulnerability classified as problematic was found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decodedbitstreamparser.cpp. The manipulation leads to null pointer dereference. The...

7.5CVSS5.3AI score0.01356EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/10 6:15 a.m.4 views

UBUNTU-CVE-2023-2618

A vulnerability, which was classified as problematic, has been found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decodedbitstreamparser.cpp. The manipulation leads to memory leak. The attac...

7.5CVSS5.2AI score0.01303EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/05/10 5:31 a.m.42 views

CVE-2023-2617 OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference

A vulnerability classified as problematic was found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decodedbitstreamparser.cpp. The manipulation leads to null pointer dereference. The...

5.3CVSS7.9AI score0.01356EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.9 views

OpenCV 安全漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library. A security vulnerability exists in the OpenCV wechatqrcode module, which originates from the function DecodedBitStreamParser::decodeHanziSegment in the file qrcode/decoder/decodedbitstreamparser.cpp and could lead to a...

7.5CVSS6.2AI score0.01303EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.3 views

PT-2023-20538 · Opencv +2 · Opencv +2

Name of the Vulnerable Software and Affected Versions: OpenCV wechat qrcode Module versions up to 4.7.0 Description: A problematic issue has been found in the OpenCV wechat qrcode Module, affecting the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded bit stre...

7.5CVSS6.4AI score0.0337EPSS
SaveExploits2References27
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.5 views

PT-2023-20537 · Opencv +2 · Opencv +2

Name of the Vulnerable Software and Affected Versions: OpenCV wechat qrcode Module versions up to 4.7.0 Description: A problematic vulnerability was found in the OpenCV wechat qrcode Module, affecting the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded bit...

7.5CVSS6.4AI score0.0337EPSS
SaveExploits2References27
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.12 views

OpenCV 代码问题漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library. A code issue vulnerability exists in the OpenCV wechatqrcode module, which stems from the function DecodedBitStreamParser::decodeByteSegment in the file qrcode/decoder/decodedbitstreamparser.cpp that could lead to null...

7.5CVSS6.2AI score0.01356EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.6 views

Phodal CMD 跨站脚本漏洞

Phodal CMD is a drop-in editor for the WeChat media platform by Fengda Huang, an individual developer in China. A security vulnerability exists in Phodal CMD version v.1.0, which stems from the presence of a cross-site scripting vulnerability that allows local attackers to execute arbitrary code...

6.1CVSS6.4AI score0.00425EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/25 12:15 p.m.7 views

CVE-2022-45837

Reflected Cross-Site Scripting XSS vulnerability in Denis 微信机器人高级版 plugin = 6.0.1 versions...

6.1CVSS5.8AI score0.00408EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.6 views

WordPress Plugin 微信机器人高级版 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.8AI score0.00408EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/03/21 6:30 p.m.27 views

weixin-python XML External Entity vulnerability

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The name...

9.8CVSS9.3AI score0.00775EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2023/03/21 6:30 p.m.139 views

GHSA-H384-PH77-3699 weixin-python XML External Entity vulnerability

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The name...

9.8CVSS7.8AI score0.00775EPSS
SaveExploits0References7
OSV
OSV
added 2023/03/21 6:15 p.m.18 views

CVE-2018-25082

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

9.8CVSS9.8AI score
SaveExploits0References5
NVD
NVD
added 2023/03/21 6:15 p.m.27 views

CVE-2018-25082

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

9.8CVSS7.1AI score0.00775EPSS
SaveExploits0References5
Prion
Prion
added 2023/03/21 6:15 p.m.19 views

Xxe

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

7.5CVSS9.5AI score0.00775EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/21 6:0 p.m.9 views

CVE-2018-25082 zwczou WeChat SDK Python to_xml xml external entity reference

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

6.5CVSS9.6AI score0.00775EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/03/21 6:0 p.m.39 views

CVE-2018-25082 zwczou WeChat SDK Python to_xml xml external entity reference

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/toxml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patc...

6.5CVSS9.6AI score0.00775EPSS
SaveExploits0References5
CVE
CVE
added 2023/03/21 6:0 p.m.82 views

CVE-2018-25082

CVE-2018-25082 affects zwczou WeChat SDK Python 0.3.0. Root cause: XML External Entity (XXE) reference via validate/to_xml, enabling remote manipulation. Impact as described: potential impact on confidentiality, integrity, and availability due to unresolved external entities. Public details indic...

9.8CVSS7.9AI score0.00775EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/21 12:0 a.m.18 views

PT-2023-10823

Name of the Vulnerable Software and Affected Versions zwczou WeChat SDK Python versions 0.3.0 through 0.5.4 Description A critical issue affects the validate/to xml function, leading to xml external entity reference. The attack may be initiated remotely. Recommendations To address this issue,...

9.8CVSS6.7AI score0.00775EPSS
SaveExploits0References16
OSV
OSV
added 2023/02/21 2:15 p.m.6 views

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

9.8CVSS6.1AI score0.00761EPSS
SaveExploits1References1
Rows per page
Query Builder