EUVD-2007-4208

Malware in sbrugna...

Improper Neutralization

Overview github.com/hashicorp/vault/vault is a tool for securely accessing secrets. Affected versions of this package are vulnerable to Improper Neutralization via validateTOTP. An attacker can gain unauthorized access to protected resources by reusing a valid code within its validity period by...

SUSE CVE-2015-5523

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service crash via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation...