Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sistent). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/auditando-router-thomson-tcw710 - https://vuldb.com/?id.126700
CVE ID: CVE-2018-25040 State: PUBLISHED Published: 2022-06-17T04:45:30.000Z Last Updated: 2025-04-15T14:24:17.385Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: uTorrent Products: Web Problem Types: CWE-269 Description: A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
ecommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ - https://vuldb.com/?id.113803
CVE ID: CVE-2018-25041 State: PUBLISHED Published: 2022-06-17T04:45:32.000Z Last Updated: 2025-04-15T14:24:10.455Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: uTorrent Problem Types: CWE-269 Description: A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
ended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ - http://lock.cmpxchg8b.com/Moer0kae.html - https://vuldb.com/?id.113804
CVE ID: CVE-2018-25042 State: PUBLISHED Published: 2022-06-17T04:45:33.000Z Last Updated: 2025-04-15T14:24:03.407Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: uTorrent Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - https://www.scmagazineuk.com/utorrent-ap
References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ - https://vuldb.com/?id.113805
CVE ID: CVE-2018-25043 State: PUBLISHED Published: 2022-06-17T04:45:35.000Z Last Updated: 2025-04-15T14:23:56.346Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: uTorrent Problem Types: CWE-287 Description: A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.o
onent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/efaq.html - https://vuldb.com/?id.113806
CVE ID: CVE-2018-25044 State: PUBLISHED Published: 2022-06-17T04:45:36.000Z Last Updated: 2025-04-15T14:23:49.704Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: uTorrent Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ded to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/efaq.html - https://vuldb.com/?id.113807
CVE ID: CVE-2018-25045 State: PUBLISHED Published: 2022-07-23T01:43:37 Last Updated: 2024-08-05T12:26:39.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/encode/django-rest-framework/pull/6191 - https://github.com/encode/django-rest-framework/pull/6330 - https://github.com/encode/django-rest-framework/commit/4bb9a3c48427867ef1e46f7dee945a4c25a4f9b8
CVE ID: CVE-2018-25046 State: PUBLISHED Published: 2022-12-27T21:13:15.767Z Last Updated: 2025-04-11T22:53:21.678Z Vendors: code.cloudfoundry.org/archiver Products: code.cloudfoundry.org/archiver/extractor Problem Types: CWE 29: Path Traversal: "\..\filename" Description: Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840 - https://snyk.io/research/zip-slip-vulnerability - https://pkg.go.dev/vuln/GO-2020-0025
CVE ID: CVE-2018-25047 State: PUBLISHED Published: 2022-09-14T00:00:00.000Z Last Updated: 2025-11-03T21:44:10.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smarty_function_mailto, and that could be parameterized using GET or POST input parameters, could allow injection of JavaScript code by a user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smarty-php/smarty/issues/454 - https://github.com/smarty-php/smarty/releases/tag/v4.2.1 - https://github.com/smarty-php/smarty/releases/tag/v3.1.47 - https://bugs.gentoo.org/870100 - htt
y/releases/tag/v4.2.1 - https://github.com/smarty-php/smarty/releases/tag/v3.1.47 - https://bugs.gentoo.org/870100 - https://security.gentoo.org/glsa/202209-09 - https://lists.debian.org/debian-lts-announce/2023/01/msg00002.html
CVE ID: CVE-2018-25048 State: PUBLISHED Published: 2023-03-23T10:45:36.900Z Last Updated: 2025-02-19T21:00:29.711Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: Control for BeagleBone, Control for emPC-A/iMX6, Control for IOT2000, Control for PFC100, Control for PFC200, Control for Raspberry Pi, Control RTE V3 (all variants), Control Win V3 (all variants), V3 Simulation Runtime (part of the CODESYS Development System), HMI V3 (all variants), V3 Remote Target Visu (all variants), Control V3 Runtime System Toolkit, V3 Embedded Target Visu Toolkit, V3 Remote Target Visu Toolkit, Runtime Toolkit 32 bit embedded, Runtime Toolkit 32 bit full, Run
ed Target Visu Toolkit, V3 Remote Target Visu Toolkit, Runtime Toolkit 32 bit embedded, Runtime Toolkit 32 bit full, Runtime PLCWinNT Problem Types: CWE-22 Description: The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/fileadmin/data/customers/security/2018/Advisory2018-04_CDS-59017.pdf
CVE ID: CVE-2018-25049 State: PUBLISHED Published: 2022-12-27T08:10:40.816Z Last Updated: 2025-04-11T16:47:01.141Z Severity: LOW (CVSS 3 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: email-existence Problem Types: CWE-1333 Description: A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
atch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216854 - https://vuldb.com/?ctiid.216854 - https://github.com/nmanousos/email-existence/pull/37 - https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56
CVE ID: CVE-2018-25050 State: PUBLISHED Published: 2022-12-28T09:04:39.839Z Last Updated: 2025-04-10T20:37:06.117Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Harvest Products: Chosen Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument group_label leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.8.7 is able to address this issue. The name of the patch is 77fd031d541e77510268d1041ed37798fdd1017e. It is r
version 1.8.7 is able to address this issue. The name of the patch is 77fd031d541e77510268d1041ed37798fdd1017e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216956. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216956 - https://vuldb.com/?ctiid.216956 - https://github.com/harvesthq/chosen/pull/2997 - https://github.com/harvesthq/chosen/commit/77fd031d541e77510268d1041ed37798fdd1017e - https://github.com/harvesthq/chosen/releases/tag/v1.8.7
CVE ID: CVE-2018-25051 State: PUBLISHED Published: 2022-12-28T11:17:21.014Z Last Updated: 2024-08-05T12:26:39.632Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: JmPotato Products: Pomash Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is be1914ef0a6808e00f51618b2de92496a3604415. It is recommended to apply a patch to fix this issue. The i
me of the patch is be1914ef0a6808e00f51618b2de92496a3604415. It is recommended to apply a patch to fix this issue. The identifier VDB-216957 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216957 - https://vuldb.com/?ctiid.216957 - https://github.com/JmPotato/Pomash/commit/be1914ef0a6808e00f51618b2de92496a3604415
CVE ID: CVE-2018-25052 State: PUBLISHED Published: 2022-12-28T11:19:44.791Z Last Updated: 2024-08-05T12:26:39.695Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Catalyst-Plugin-Session Problem Types: CWE-79 Description: A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function _load_sessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.41 is able to address this issue. The name of the patch is 88d1b599e
k can be initiated remotely. Upgrading to version 0.41 is able to address this issue. The name of the patch is 88d1b599e1163761c9bd53bec53ba078f13e09d4. It is recommended to upgrade the affected component. VDB-216958 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216958 - https://vuldb.com/?ctiid.216958 - https://github.com/perl-catalyst/Catalyst-Plugin-Session/commit/88d1b599e1163761c9bd53bec53ba078f13e09d4 - https://github.com/perl-catalyst/Catalyst-Plugin-Session/releases/tag/0.41
CVE ID: CVE-2018-25053 State: PUBLISHED Published: 2022-12-28T11:21:57.854Z Last Updated: 2024-08-05T12:26:39.655Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: moappi Products: Json2html Problem Types: CWE-79 Description: A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown processing of the file json2html.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is 2d3d24d971b19a8ed1fb823596300b9835d55801. It is recommended to upgrade the affected component. The associated iden
ch is 2d3d24d971b19a8ed1fb823596300b9835d55801. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216959. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216959 - https://vuldb.com/?ctiid.216959 - https://github.com/moappi/json2html/commit/2d3d24d971b19a8ed1fb823596300b9835d55801 - https://github.com/moappi/json2html/releases/tag/1.2.0
CVE ID: CVE-2018-25054 State: PUBLISHED Published: 2022-12-28T11:24:01.839Z Last Updated: 2024-11-19T19:46:17.240Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: shred Products: cilla Problem Types: CWE-79 Description: A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is d345e6bc7798bd717a583ec7f545ca387819d5c7. It is recommended to apply a patch to fix this is
ly. The name of the patch is d345e6bc7798bd717a583ec7f545ca387819d5c7. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216960. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216960 - https://vuldb.com/?ctiid.216960 - https://github.com/shred/cilla/commit/d345e6bc7798bd717a583ec7f545ca387819d5c7
CVE ID: CVE-2018-25055 State: PUBLISHED Published: 2022-12-28T11:26:20.808Z Last Updated: 2024-08-05T12:26:39.671Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: FarCry Solr Pro Plugin Problem Types: CWE-79 Description: A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of the argument suggestion leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is
The attack can be launched remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is b8f3d61511c9b02b781ec442bfb803cbff8e08d5. It is recommended to upgrade the affected component. The identifier VDB-216961 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.216961 - https://vuldb.com/?ctiid.216961 - https://github.com/jeffcoughlin/farcrysolrpro/issues/78 - https://github.com/jeffcoughlin/farcrysolrpro/commit/b8f3d61511c9b02b781ec442bfb803cbff8e08d5 - https://github.com/jeffcoughlin/farcrysolrpro/releases/tag/1.6.0
CVE ID: CVE-2018-25056 State: PUBLISHED Published: 2022-12-28T11:32:54.972Z Last Updated: 2024-08-05T12:26:39.643Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: yolapi Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0fe129055a99f429133a5c40cb13b44611ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerabilit
1ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216966 - https://vuldb.com/?ctiid.216966 - https://github.com/yola/yolapi/commit/a0fe129055a99f429133a5c40cb13b44611ff796
CVE ID: CVE-2018-25057 State: PUBLISHED Published: 2022-12-28T20:30:56.990Z Last Updated: 2024-08-05T12:26:39.582Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: simple_php_link_shortener Problem Types: CWE-89 Description: A vulnerability was found in simple_php_link_shortener. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument $link["id"] leads to sql injection. The name of the patch is b26ac6480761635ed94ccb0222ba6b732de6e53f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216996. Additional Analyst Notes: - CVE Program
y a patch to fix this issue. The identifier of this vulnerability is VDB-216996. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216996 - https://vuldb.com/?ctiid.216996 - https://github.com/mikebharris/simple_php_link_shortener/commit/b26ac6480761635ed94ccb0222ba6b732de6e53f
CVE ID: CVE-2018-25058 State: PUBLISHED Published: 2022-12-29T07:56:13.976Z Last Updated: 2024-08-05T12:26:39.697Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: n/a Products: Twitter-Post-Fetcher Problem Types: CWE-1022 Description: A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown part of the file js/twitterFetcher.js of the component Link Target Handler. The manipulation leads to use of web link to untrusted target with window.opener access. It is possible to initiate the attack remotely. Upgrading to version 18.0.0 is able to address this issue. The name of the patch is 7d281c6fb5acbc29a
e attack remotely. Upgrading to version 18.0.0 is able to address this issue. The name of the patch is 7d281c6fb5acbc29a2cad295262c1f0c19ca56f3. It is recommended to upgrade the affected component. The identifier VDB-217017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217017 - https://vuldb.com/?ctiid.217017 - https://github.com/jasonmayes/Twitter-Post-Fetcher/pull/170 - https://github.com/jasonmayes/Twitter-Post-Fetcher/commit/7d281c6fb5acbc29a2cad295262c1f0c19ca56f3 - https://github.com/jasonmayes/Twitter-Post-Fetcher/releases/tag/18.0.0
CVE ID: CVE-2018-25059 State: PUBLISHED Published: 2022-12-30T10:57:46.306Z Last Updated: 2024-08-05T12:26:39.660Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: pastebinit Problem Types: CWE-22 Description: A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 is able to address this issue. The name of the patch is 1af2facb6d95976c532b7f8f82747d454a092272. It is recommended to upgrade the affected component. The identifier of this vulnerability is V
532b7f8f82747d454a092272. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217040. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217040 - https://vuldb.com/?ctiid.217040 - https://github.com/jessfraz/pastebinit/pull/3 - https://github.com/jessfraz/pastebinit/commit/1af2facb6d95976c532b7f8f82747d454a092272 - https://github.com/jessfraz/pastebinit/releases/tag/v0.2.3
CVE ID: CVE-2018-25060 State: PUBLISHED Published: 2022-12-30T11:47:29.633Z Last Updated: 2024-08-05T12:26:39.633Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Macaron Products: csrf Problem Types: CWE-614 Description: A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as dadd1711a617000b70e5e408a76531b73187031c. It is recomme
xploitation is known to be difficult. The patch is identified as dadd1711a617000b70e5e408a76531b73187031c. It is recommended to apply a patch to fix this issue. VDB-217058 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217058 - https://vuldb.com/?ctiid.217058 - https://github.com/go-macaron/csrf/pull/7 - https://github.com/go-macaron/csrf/commit/dadd1711a617000b70e5e408a76531b73187031c
CVE ID: CVE-2018-25061 State: PUBLISHED Published: 2022-12-31T19:33:48.503Z Last Updated: 2024-08-05T12:26:39.682Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: rgb2hex Problem Types: CWE-1333 Description: A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The patch is named 9e0c38594432edfa64136fdf7bb651835e17c34f. It is recommended to upgrade the affected component. The associated identifier of this vul
edfa64136fdf7bb651835e17c34f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217151. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217151 - https://vuldb.com/?ctiid.217151 - https://github.com/christian-bromann/rgb2hex/commit/9e0c38594432edfa64136fdf7bb651835e17c34f - https://github.com/christian-bromann/rgb2hex/releases/tag/v0.1.6