aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2023-37276 via aiohttp (0.22.5)

aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2023-37276 Source advisory: OSV:PYSEC-2023-120...

aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2023-37276 via aiohttp (0.22.5)

aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2023-37276 Source advisory: OSV:GHSA-45C4-8WX5-QW6W...

wt-pedevilla.at Cross Site Scripting vulnerability OBB-2859358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-43824

A flaw was found in envoy. A crafted request can potentially trigger a NULL pointer dereference when using a WT filter saferegex match...

CVE-2021-1002

In WTInterpolate of easwtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

PT-2021-13406

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a possible out of bounds read in the WT Interpolate function of eas wtengine.c due to a missing bounds check. This could lead to remote information disclosure with no additional...

PT-2021-13284

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-11 Description The issue is related to a possible out of bounds read in the WT InterpolateNoLoop function of eas wtengine.c. This could lead to remote information disclosure without requiring addition...

aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2021-21330 via aiohttp (0.22.5)

aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2021-21330 Source advisory: OSV:PYSEC-2021-76...

aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2021-21330 via aiohttp (0.22.5)

aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2021-21330 Source advisory: OSV:GHSA-V6WP-4M6F-GCJG...

Null pointer dereference

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

Memory corruption

Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file,...

Sql injection

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6636

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...

PT-2014-7114

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issu...

PT-2012-1437

Name of the Vulnerable Software and Affected Versions Autodesk Design Review version 11.0.0.86 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll, whiptk wt.7.12.601.dll, or xaml wt.7.6.0.dll file in the current working directory. This can be demonstrated by...

CVE-2010-1273

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

CVE-2010-1274

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

Design/Logic Flaw

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

CVE-2010-1273

CVE-2010-1273 affects Emweb Wt prior to 3.1.1. The root cause is that UTF-8 encoding for (1) form values and (2) JSignal arguments is not validated. The provided sources describe the condition and impact as unspecified, with remote attack vectors implied but not detailed. No remediation or fixed ...