Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-25075 State: PUBLISHED Published: 2022-08-23T00:53:58 Last Updated: 2024-08-05T03:00:19.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40maxime.escourbiac/write-up-of-path-traversal-on-gravitee-io-8835941be69f - https://github.com/gravitee-io/gravitee-api-management
CVE ID: CVE-2019-25076 State: PUBLISHED Published: 2022-09-08T22:08:42 Last Updated: 2024-08-05T03:00:18.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack. Additional Analyst Notes: - CVE Program Container: References: - https://sites.google.com/view/tuple-space-explosion - https://dl.acm.org/citation.cfm?doid=3359989.3365431 - https://arxiv.or
://sites.google.com/view/tuple-space-explosion - https://dl.acm.org/citation.cfm?doid=3359989.3365431 - https://arxiv.org/abs/2011.09107 - https://www.youtube.com/watch?v=DSC3m-Bww64 - https://www.youtube.com/watch?v=5cHpzVK0D28
CVE ID: CVE-2019-25078 State: PUBLISHED Published: 2022-12-13T00:00:00 Last Updated: 2024-08-05T03:00:18.888Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: pacparser Problem Types: CWE-119 Description: A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the argument url leads to buffer overflow. Attacking locally is a requirement. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is 853e8f45607cb07b877ffd270c63dbcdd5201ad9. It is recommended to upgrade the affected
this issue. The name of the patch is 853e8f45607cb07b877ffd270c63dbcdd5201ad9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215443. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/manugarg/pacparser/issues/99 - https://github.com/manugarg/pacparser/releases/tag/v1.4.0 - https://github.com/manugarg/pacparser/commit/853e8f45607cb07b877ffd270c63dbcdd5201ad9 - https://vuldb.com/?id.215443
CVE ID: CVE-2019-25079 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:48.983Z Description: No description available.
CVE ID: CVE-2019-25080 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:49.352Z Description: No description available.
CVE ID: CVE-2019-25081 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:49.734Z Description: No description available.
CVE ID: CVE-2019-25082 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:50.093Z Description: No description available.
CVE ID: CVE-2019-25083 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:43:50.504Z Description: No description available.
CVE ID: CVE-2019-25084 State: PUBLISHED Published: 2022-12-25T17:01:05.959Z Last Updated: 2024-08-05T03:00:19.092Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Hide Files on GitHub Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is 9de0c57df81db1178e0e79431d462f6d9842742e. It is recommended to upgrade the affec
ss this issue. The name of the patch is 9de0c57df81db1178e0e79431d462f6d9842742e. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216767. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216767 - https://vuldb.com/?ctiid.216767 - https://github.com/sindresorhus/hide-files-on-github/pull/73 - https://github.com/sindresorhus/hide-files-on-github/commit/9de0c57df81db1178e0e79431d462f6d9842742e - https://github.com/sindresorhus/hide-files-on-github/releases/tag/3.0.0
CVE ID: CVE-2019-25085 State: PUBLISHED Published: 2022-12-26T06:58:13.536Z Last Updated: 2024-08-05T03:00:18.977Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: GNOME Products: gvdb Problem Types: CWE-416 Description: A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the attack remotely. The name of the patch is d83587b2a364eb9a9a53be7e6a708074e252de14. It is recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability. Additional
recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216789 - https://vuldb.com/?ctiid.216789 - https://github.com/GNOME/gvdb/commit/d83587b2a364eb9a9a53be7e6a708074e252de14
CVE ID: CVE-2019-25086 State: PUBLISHED Published: 2022-12-27T08:38:01.608Z Last Updated: 2024-08-05T03:00:19.103Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: IET-OU Products: Open Media Player Problem Types: CWE-79 Description: A vulnerability was found in IET-OU Open Media Player up to 1.5.0. It has been declared as problematic. This vulnerability affects the function webvtt of the file application/controllers/timedtext.php. The manipulation of the argument ttml_url leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.5.1 is able to address this issue. The name of the patch is 3f39f2d68d11895929c04f7b49b97a734ae7cd1f
rading to version 1.5.1 is able to address this issue. The name of the patch is 3f39f2d68d11895929c04f7b49b97a734ae7cd1f. It is recommended to upgrade the affected component. VDB-216862 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216862 - https://vuldb.com/?ctiid.216862 - https://github.com/IET-OU/open-media-player/issues/93 - https://iet.eu.teamwork.com/desk/#/tickets/366419 - https://github.com/IET-OU/open-media-player/commit/3f39f2d68d11895929c04f7b49b97a734ae7cd1f - https://github.com/IET-OU/open-media-player/releases/tag/1.5.1
CVE ID: CVE-2019-25087 State: PUBLISHED Published: 2022-12-27T08:42:42.309Z Last Updated: 2024-11-19T19:47:57.738Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: RamseyK Products: httpserver Problem Types: CWE-24 Description: A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be initiated remotely. The name of the patch is 1a0de56e4dafff9c2f9c8f6b130a764f7a50df52. It is recommended to apply a patch to fix this issue. The
name of the patch is 1a0de56e4dafff9c2f9c8f6b130a764f7a50df52. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216863. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216863 - https://vuldb.com/?ctiid.216863 - https://github.com/RamseyK/httpserver/commit/1a0de56e4dafff9c2f9c8f6b130a764f7a50df52
CVE ID: CVE-2019-25088 State: PUBLISHED Published: 2022-12-27T09:41:31.218Z Last Updated: 2024-08-05T03:00:19.191Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: ytti Products: Oxidized Web Problem Types: CWE-79 Description: A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the argument to_research leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier
9bdc68b03ebce9280b8746ef31d7fdedcc45. It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216870 - https://vuldb.com/?ctiid.216870 - https://github.com/ytti/oxidized-web/pull/195 - https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45
CVE ID: CVE-2019-25089 State: PUBLISHED Published: 2022-12-27T11:59:00.753Z Last Updated: 2024-08-05T03:00:18.935Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Morgawr Products: Muon Problem Types: CWE-330 Description: A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version 0.2.0-indev is able to address this issue. The name of the patch is c09ed972c020f759110c707b06ca2644f0bacd7f. It is recommended to upgrade the affected comp
issue. The name of the patch is c09ed972c020f759110c707b06ca2644f0bacd7f. It is recommended to upgrade the affected component. The identifier VDB-216877 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.216877 - https://vuldb.com/?ctiid.216877 - https://github.com/Morgawr/Muon/issues/4 - https://github.com/Morgawr/Muon/commit/c09ed972c020f759110c707b06ca2644f0bacd7f
CVE ID: CVE-2019-25090 State: PUBLISHED Published: 2022-12-27T12:04:53.087Z Last Updated: 2024-08-05T03:00:19.156Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: FreePBX Products: arimanager Problem Types: CWE-79 Description: A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Views Handler. The manipulation of the argument dataurl leads to cross site scripting. The attack may be launched remotely. Upgrading to version 13.0.5.4 is able to address this issue. The name of the patch is 199dea7cc7020d3c469a86a39fbd80f5edd3c5ab. It is recommended to upgra
ble to address this issue. The name of the patch is 199dea7cc7020d3c469a86a39fbd80f5edd3c5ab. It is recommended to upgrade the affected component. VDB-216878 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216878 - https://vuldb.com/?ctiid.216878 - https://github.com/FreePBX/arimanager/commit/199dea7cc7020d3c469a86a39fbd80f5edd3c5ab - https://github.com/FreePBX/arimanager/releases/tag/release%2F13.0.5.4
CVE ID: CVE-2019-25091 State: PUBLISHED Published: 2022-12-27T22:42:34.788Z Last Updated: 2024-08-05T03:00:19.365Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: nsupdate.info Problem Types: CWE-1004 Description: A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/nsupdate/settings/base.py of the component CSRF Cookie Handler. The manipulation of the argument CSRF_COOKIE_HTTPONLY leads to cookie without 'httponly' flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this
tely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216909 - https://vuldb.com/?ctiid.216909 - https://github.com/nsupdate-info/nsupdate.info/pull/410 - https://github.com/nsupdate-info/nsupdate.info/commit/60a3fe559c453bc36b0ec3e5dd39c1303640a59a
CVE ID: CVE-2019-25092 State: PUBLISHED Published: 2022-12-28T08:55:59.183Z Last Updated: 2025-04-11T14:32:28.267Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: Nakiami Products: Mellivora Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function print_user_ip_log of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry['ip'] leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.2.0 is able to address this issue. The name of the patch is e0b6965f8dde608a3d2621617
d remotely. Upgrading to version 2.2.0 is able to address this issue. The name of the patch is e0b6965f8dde608a3d2621617c05695eb406cbb9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216955. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216955 - https://vuldb.com/?ctiid.216955 - https://github.com/Nakiami/mellivora/commit/e0b6965f8dde608a3d2621617c05695eb406cbb9 - https://github.com/Nakiami/mellivora/releases/tag/v2.2.0
CVE ID: CVE-2019-25093 State: PUBLISHED Published: 2023-01-02T10:28:03.008Z Last Updated: 2025-05-28T13:44:56.300Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: dragonexpert Products: Recent Threads on Index Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the function recentthread_list_threads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler. The manipulation of the argument recentthread_forumskip leads to cross site scripting. It is possible to launch the attack remotely. The patch is identified as 051465d807a8fcc6a8b0f4bcbb19299672399f48. It
g. It is possible to launch the attack remotely. The patch is identified as 051465d807a8fcc6a8b0f4bcbb19299672399f48. It is recommended to apply a patch to fix this issue. VDB-217182 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217182 - https://vuldb.com/?ctiid.217182 - https://github.com/dragonexpert/recentthreads/commit/051465d807a8fcc6a8b0f4bcbb19299672399f48
CVE ID: CVE-2019-25094 State: PUBLISHED Published: 2023-01-04T09:15:33.672Z Last Updated: 2024-08-05T03:00:19.369Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: innologi Products: appointments Extension Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in innologi appointments Extension up to 2.0.5 on TYPO3. This affects an unknown part of the component Appointment Handler. The manipulation of the argument formfield leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.6 is able to address this issue. The identifier of the patch is 986d3cb34e5e086c6f04e061f600ffc5837abe7f. It is re
n 2.0.6 is able to address this issue. The identifier of the patch is 986d3cb34e5e086c6f04e061f600ffc5837abe7f. It is recommended to upgrade the affected component. The identifier VDB-217353 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217353 - https://vuldb.com/?ctiid.217353 - https://github.com/innologi/typo3-appointments/commit/986d3cb34e5e086c6f04e061f600ffc5837abe7f - https://github.com/innologi/typo3-appointments/releases/tag/2.0.6
CVE ID: CVE-2019-25095 State: PUBLISHED Published: 2023-01-05T07:44:28.221Z Last Updated: 2024-08-05T03:00:19.240Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: kakwa Products: LdapCherry Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 6f98076281e9452fdb1adcd1bcbb70a6f968ade9. It is recommended to upgrade the affected component. VDB-217434 is the identifier assi
81e9452fdb1adcd1bcbb70a6f968ade9. It is recommended to upgrade the affected component. VDB-217434 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217434 - https://vuldb.com/?ctiid.217434 - https://github.com/kakwa/ldapcherry/pull/16 - https://github.com/kakwa/ldapcherry/commit/6f98076281e9452fdb1adcd1bcbb70a6f968ade9 - https://github.com/kakwa/ldapcherry/releases/tag/1.0.0
CVE ID: CVE-2019-25096 State: PUBLISHED Published: 2023-01-05T07:58:51.895Z Last Updated: 2024-08-05T03:00:19.256Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: soerennb Products: eXtplorer Problem Types: CWE-79 Description: A vulnerability has been found in soerennb eXtplorer up to 2.1.12 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.1.13 is able to address this issue. The patch is named b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The associated identifier of this vulnerability
7a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217435. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217435 - https://vuldb.com/?ctiid.217435 - https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 - https://github.com/soerennb/extplorer/releases/tag/v2.1.13
CVE ID: CVE-2019-25097 State: PUBLISHED Published: 2023-01-05T07:58:53.396Z Last Updated: 2024-08-05T03:00:19.235Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: soerennb Products: eXtplorer Problem Types: CWE-22 Description: A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name of the patch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier of this vulnerabi
8f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217436. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217436 - https://vuldb.com/?ctiid.217436 - https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 - https://github.com/soerennb/extplorer/releases/tag/v2.1.13
CVE ID: CVE-2019-25098 State: PUBLISHED Published: 2023-01-05T07:59:57.377Z Last Updated: 2024-08-05T03:00:19.237Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: soerennb Products: eXtplorer Problem Types: CWE-22 Description: A vulnerability was found in soerennb eXtplorer up to 2.1.12. It has been classified as critical. This affects an unknown part of the file include/archive.php of the component Archive Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The identifier of the patch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier VDB-
ch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier VDB-217437 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217437 - https://vuldb.com/?ctiid.217437 - https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 - https://github.com/soerennb/extplorer/releases/tag/v2.1.13
CVE ID: CVE-2019-25099 State: PUBLISHED Published: 2023-01-06T12:01:29.899Z Last Updated: 2025-04-10T13:20:38.862Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Arthmoor Products: QSF-Portal Problem Types: CWE-22 Description: A vulnerability classified as critical was found in Arthmoor QSF-Portal. This vulnerability affects unknown code of the file index.php. The manipulation of the argument a leads to path traversal. The patch is identified as ea4f61e23ecb83247d174bc2e2cbab521c751a7d. It is recommended to apply a patch to fix this issue. VDB-217558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
VDB-217558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217558 - https://vuldb.com/?ctiid.217558 - https://github.com/Arthmoor/QSF-Portal/commit/ea4f61e23ecb83247d174bc2e2cbab521c751a7d
CVE ID: CVE-2019-25100 State: PUBLISHED Published: 2023-01-08T10:34:20.523Z Last Updated: 2024-08-05T03:00:19.240Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: happyman Products: twmap Problem Types: CWE-89 Description: A vulnerability was found in happyman twmap. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file twmap3/data/ajaxCRUD/pointdata2.php. The manipulation of the argument id leads to sql injection. Upgrading to version v2.9_v4.31 is able to address this issue. The identifier of the patch is babbec79b3fa4efb3bd581ea68af0528d11bba0c. It is recommended to upgrade the affected component. The ide
r of the patch is babbec79b3fa4efb3bd581ea68af0528d11bba0c. It is recommended to upgrade the affected component. The identifier VDB-217645 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217645 - https://vuldb.com/?ctiid.217645 - https://github.com/happyman/twmap/issues/42 - https://github.com/happyman/twmap/commit/babbec79b3fa4efb3bd581ea68af0528d11bba0c - https://github.com/happyman/twmap/releases/tag/v2.9_v4.31
CVE ID: CVE-2019-25101 State: PUBLISHED Published: 2023-02-04T07:57:05.298Z Last Updated: 2024-08-05T03:00:19.286Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OnShift Products: TurboGears Problem Types: CWE-113 Description: A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely. Upgrading to version 1.0.11.11 is able to address this issue. The patch is named f68bbaba47f4474e1da553aa51564a73e1d92a84. It is recommended to upgrade the affected com
s this issue. The patch is named f68bbaba47f4474e1da553aa51564a73e1d92a84. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220059. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220059 - https://vuldb.com/?ctiid.220059 - https://github.com/OnShift/turbogears/pull/18 - https://github.com/OnShift/turbogears/commit/f68bbaba47f4474e1da553aa51564a73e1d92a84 - https://github.com/OnShift/turbogears/releases/tag/v1.0.11.11