Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nded to apply a patch to fix this issue. The identifier VDB-218453 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218453 - https://vuldb.com/?ctiid.218453 - https://github.com/saemorris/TheRadSystem/commit/bfba26bd34af31648a11af35a0bb66f1948752a6
CVE ID: CVE-2015-10064 State: PUBLISHED Published: 2023-01-17T18:58:05.429Z Last Updated: 2024-08-06T08:58:26.026Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: VictorFerraresi Products: pokemon-database-php Problem Types: CWE-89 Description: A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named dd0e1e6cdf648d6a3deff441f515bcb1d7573d68. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218455. Additional Analyst Notes: - CVE Program C
fix this issue. The associated identifier of this vulnerability is VDB-218455. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218455 - https://vuldb.com/?ctiid.218455 - https://github.com/VictorFerraresi/pokemon-database-php/commit/dd0e1e6cdf648d6a3deff441f515bcb1d7573d68
CVE ID: CVE-2015-10065 State: PUBLISHED Published: 2023-01-17T22:58:04.086Z Last Updated: 2024-08-06T08:58:26.416Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AenBleidd Products: FiND Problem Types: CWE-120 Description: A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result of the file validator/my_validator.cpp. The manipulation leads to buffer overflow. The patch is identified as ee2eef34a83644f286c9adcaf30437f92e9c48f1. It is recommended to apply a patch to fix this issue. VDB-218458 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
ue. VDB-218458 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218458 - https://vuldb.com/?ctiid.218458 - https://github.com/AenBleidd/FiND/commit/ee2eef34a83644f286c9adcaf30437f92e9c48f1
CVE ID: CVE-2015-10066 State: PUBLISHED Published: 2023-01-17T23:58:13.594Z Last Updated: 2024-08-06T08:58:25.980Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: tynx Products: wuersch Problem Types: CWE-89 Description: A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/getByCustomQuery of the file backend/base/Store.class.php. The manipulation leads to sql injection. The patch is identified as 66d4718750a741d1053d327a79e285fd50372519. It is recommended to apply a patch to fix this issue. VDB-218462 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co
fix this issue. VDB-218462 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218462 - https://vuldb.com/?ctiid.218462 - https://github.com/tynx/wuersch/commit/66d4718750a741d1053d327a79e285fd50372519
CVE ID: CVE-2015-10067 State: PUBLISHED Published: 2023-01-18T00:58:03.367Z Last Updated: 2025-04-03T19:31:33.659Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: oznetmaster Products: SSharpSmartThreadPool Problem Types: CWE-366 Description: A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThreadPool/SmartThreadPool.cs. The manipulation leads to race condition within a thread. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 0e58073c831093aad75e077962e9fb55cad0dc5f. It is recommended to apply a p
ity is told to be difficult. The patch is named 0e58073c831093aad75e077962e9fb55cad0dc5f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218463. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218463 - https://vuldb.com/?ctiid.218463 - https://github.com/oznetmaster/SSharpSmartThreadPool/commit/0e58073c831093aad75e077962e9fb55cad0dc5f
CVE ID: CVE-2015-10068 State: PUBLISHED Published: 2023-01-18T07:58:03.115Z Last Updated: 2024-08-06T08:58:26.398Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: danynab Products: movify-j Problem Types: CWE-89 Description: A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is c3085e01936a4d7eff1eda3093f25d56cc4d2ec5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218476. Additional Analys
is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218476. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218476 - https://vuldb.com/?ctiid.218476 - https://github.com/danynab/movify-j/commit/c3085e01936a4d7eff1eda3093f25d56cc4d2ec5
CVE ID: CVE-2015-10069 State: PUBLISHED Published: 2023-01-19T07:58:05.234Z Last Updated: 2024-08-06T08:58:26.360Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: viakondratiuk Products: cash-machine Problem Types: CWE-89 Description: A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function is_card_pin_at_session/update_failed_attempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is 62a6e24efdfa195b70d7df140d8287fdc38eb66d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218896. Additional Analy
is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218896. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218896 - https://vuldb.com/?ctiid.218896 - https://github.com/viakondratiuk/cash-machine/commit/62a6e24efdfa195b70d7df140d8287fdc38eb66d
CVE ID: CVE-2015-10070 State: PUBLISHED Published: 2023-01-19T09:22:31.500Z Last Updated: 2024-08-06T08:58:26.140Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: copperwall Products: Twiddit Problem Types: CWE-89 Description: A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to fix this issue. The identifier VDB-218897 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References:
dentifier VDB-218897 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218897 - https://vuldb.com/?ctiid.218897 - https://github.com/copperwall/twiddit/commit/2203d4ce9810bdaccece5c48ff4888658a01acfc
CVE ID: CVE-2015-10071 State: PUBLISHED Published: 2023-01-19T09:22:37.907Z Last Updated: 2024-08-06T08:58:25.616Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: gitter-badger Products: ezpublish-modern-legacy Problem Types: CWE-640 Description: A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects some unknown processing of the file kernel/user/forgotpassword.php. The manipulation leads to weak password recovery. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is named 5908d5ee65fec61ce0e32
known to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is named 5908d5ee65fec61ce0e321d586530461a210bf2a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218951. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218951 - https://vuldb.com/?ctiid.218951 - https://github.com/gitter-badger/ezpublish-modern-legacy/commit/5908d5ee65fec61ce0e321d586530461a210bf2a - https://github.com/gitter-badger/ezpublish-modern-legacy/releases/tag/1.0
CVE ID: CVE-2015-10072 State: PUBLISHED Published: 2023-02-04T03:57:03.184Z Last Updated: 2024-11-25T16:00:22.671Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: NREL Products: api-umbrella-web Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address this issue. The name of the patch is bcc0e922c61d30367678c8f17a435950969315cd. It is recommended to upgrade the affected component. The identifier of this vulnerab
22c61d30367678c8f17a435950969315cd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-220060. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220060 - https://vuldb.com/?ctiid.220060 - https://github.com/NREL/api-umbrella-web/commit/bcc0e922c61d30367678c8f17a435950969315cd - https://github.com/NREL/api-umbrella-web/releases/tag/v0.8.0
CVE ID: CVE-2015-10073 State: PUBLISHED Published: 2023-02-06T20:00:04.907Z Last Updated: 2024-08-06T08:58:26.336Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: tinymighty Products: WikiSEO Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.2.2 is able to address this issue. The pa
ploit has been disclosed to the public and may be used. Upgrading to version 1.2.2 is able to address this issue. The patch is named 089a5797be612b18a820f9f1e6593ad9a91b1dba. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220215. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220215 - https://vuldb.com/?ctiid.220215 - https://github.com/tinymighty/wiki-seo/pull/21 - https://github.com/tinymighty/wiki-seo/commit/089a5797be612b18a820f9f1e6593ad9a91b1dba - https://github.com/tinymighty/wiki-seo/releases/tag/1.2.2
CVE ID: CVE-2015-10074 State: PUBLISHED Published: 2023-02-07T10:00:05.066Z Last Updated: 2024-08-06T08:58:26.340Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: OpenSeaMap Products: online_chart Problem Types: CWE-79 Description: A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is able to address this issue. The patch is identified as 8649157158f921590d650e2d2f4bdf0df1017e9d. It is recommended to upgrade the affected component. VDB-22021
s identified as 8649157158f921590d650e2d2f4bdf0df1017e9d. It is recommended to upgrade the affected component. VDB-220218 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.220218 - https://vuldb.com/?ctiid.220218 - https://github.com/OpenSeaMap/online_chart/pull/70 - https://github.com/OpenSeaMap/online_chart/commit/8649157158f921590d650e2d2f4bdf0df1017e9d - https://github.com/OpenSeaMap/online_chart/releases/tag/staging
CVE ID: CVE-2015-10075 State: PUBLISHED Published: 2023-02-07T11:31:03.468Z Last Updated: 2024-08-06T08:58:26.409Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Custom-Content-Width Problem Types: CWE-79 Description: A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic. Affected by this vulnerability is the function override_content_width/register_settings of the file custom-content-width.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public an
y of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.1 is able to address this issue. The patch is named e05e0104fc42ad13b57e2b2cb2d1857432624d39. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220219. NOTE: This attack is not very likely. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220219 - https://vuldb.com/?ctiid.220219 - https://github.com/georgestephanis/Custom-Content-Width/commit/e05e0104fc42ad13b57e2b2cb2d1857432624d39
CVE ID: CVE-2015-10076 State: PUBLISHED Published: 2023-02-09T23:00:04.599Z Last Updated: 2024-11-25T15:36:07.174Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: dimtion Products: Shaarlier Problem Types: CWE-89 Description: A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java of the component Tag Handler. The manipulation leads to sql injection. Upgrading to version 1.2.3 is able to address this issue. The identifier of the patch is 3d1d9b239d9b3cd87e8bed45a0f02da583ad371e. It is recommended t
able to address this issue. The identifier of the patch is 3d1d9b239d9b3cd87e8bed45a0f02da583ad371e. It is recommended to upgrade the affected component. The identifier VDB-220453 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220453 - https://vuldb.com/?ctiid.220453 - https://github.com/dimtion/Shaarlier/commit/3d1d9b239d9b3cd87e8bed45a0f02da583ad371e - https://github.com/dimtion/Shaarlier/releases/tag/v1.2.3
CVE ID: CVE-2015-10077 State: PUBLISHED Published: 2023-02-10T14:31:03.412Z Last Updated: 2024-08-06T08:58:26.271Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: webbuilders-group Products: silverstripe-kapost-bridge Problem Types: CWE-89 Description: A vulnerability was found in webbuilders-group silverstripe-kapost-bridge 0.3.3. It has been declared as critical. Affected by this vulnerability is the function index/getPreview of the file code/control/KapostService.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to version 0.4.0 is able to address this issue. The patch is named 2e14b0fd0ea35034f90890f364b130fb4645ff35. It is recommen
version 0.4.0 is able to address this issue. The patch is named 2e14b0fd0ea35034f90890f364b130fb4645ff35. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220471. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.220471 - https://vuldb.com/?ctiid.220471 - https://github.com/webbuilders-group/silverstripe-kapost-bridge/commit/2e14b0fd0ea35034f90890f364b130fb4645ff35 - https://github.com/webbuilders-group/silverstripe-kapost-bridge/releases/tag/0.4.0
CVE ID: CVE-2015-10078 State: PUBLISHED Published: 2023-02-12T13:31:03.380Z Last Updated: 2024-08-06T08:58:25.993Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: atwellpub Products: Resend Welcome Email Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function send_welcome_email_url of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. The identifier of the patch is b14c1f66d307783f0ae74f88088a85999107695c. It
ersion 1.0.2 is able to address this issue. The identifier of the patch is b14c1f66d307783f0ae74f88088a85999107695c. It is recommended to upgrade the affected component. The identifier VDB-220637 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220637 - https://vuldb.com/?ctiid.220637 - https://github.com/atwellpub/resend-welcome-email/pull/1 - https://github.com/atwellpub/resend-welcome-email/commit/b14c1f66d307783f0ae74f88088a85999107695c
CVE ID: CVE-2015-10079 State: PUBLISHED Published: 2023-02-13T22:00:05.438Z Last Updated: 2024-11-25T16:28:12.635Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: juju2143 Products: WalrusIRC Problem Types: CWE-79 Description: A vulnerability was found in juju2143 WalrusIRC 0.0.2. It has been rated as problematic. This issue affects the function parseLinks of the file public/parser.js. The manipulation of the argument text leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 0.0.3 is able to address this issue. The patch is named 45fd885895ae13e8d9b3a71e89d59768914f60af. It is recommended to upgrade the affected component. The associated identi
med 45fd885895ae13e8d9b3a71e89d59768914f60af. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220751. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220751 - https://vuldb.com/?ctiid.220751 - https://github.com/juju2143/walrusirc/commit/45fd885895ae13e8d9b3a71e89d59768914f60af - https://github.com/juju2143/walrusirc/releases/tag/0.0.3
CVE ID: CVE-2015-10080 State: PUBLISHED Published: 2023-02-20T09:31:03.542Z Last Updated: 2024-08-06T08:58:26.363Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: NREL Products: api-umbrella-web Problem Types: CWE-79 Description: A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is able to address this issue. The patch is named f53a9fb87e10c457f0f3dd4f2af24d3b2f21b3ca. It is recommended to upgrade the affected component. The associated identif
ed f53a9fb87e10c457f0f3dd4f2af24d3b2f21b3ca. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221487. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.221487 - https://vuldb.com/?ctiid.221487 - https://github.com/NREL/api-umbrella-web/commit/f53a9fb87e10c457f0f3dd4f2af24d3b2f21b3ca - https://github.com/NREL/api-umbrella-web/releases/tag/v0.8.0
CVE ID: CVE-2015-10081 State: PUBLISHED Published: 2023-02-20T16:31:03.722Z Last Updated: 2024-11-25T15:32:43.235Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: arnoldle Products: submitByMailPlugin Problem Types: CWE-352 Description: A vulnerability was found in arnoldle submitByMailPlugin 1.0b2.9 and classified as problematic. This issue affects some unknown processing of the file edit_list.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.0b2.9a is able to address this issue. The patch is named a739f680a1623d22f52ff1371e86ca472e63756f. It is recommended to upgrade the affected component. The associated iden
named a739f680a1623d22f52ff1371e86ca472e63756f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221495. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221495 - https://vuldb.com/?ctiid.221495 - https://github.com/arnoldle/phplist-plugin-submitByMailPlugin/commit/a739f680a1623d22f52ff1371e86ca472e63756f
CVE ID: CVE-2015-10082 State: PUBLISHED Published: 2023-02-21T07:00:05.828Z Last Updated: 2024-08-06T08:58:26.353Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: UIKit0 Products: libplist Problem Types: CWE-611 Description: A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499. Additional Analyst Notes: -
y a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221499 - https://vuldb.com/?ctiid.221499 - https://github.com/UIKit0/libplist/commit/c086cb139af7c82845f6d565e636073ff4b37440
CVE ID: CVE-2015-10083 State: PUBLISHED Published: 2023-02-21T15:00:05.553Z Last Updated: 2024-08-06T08:58:26.288Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: harrystech Products: Dynosaur-Rails Problem Types: CWE-287 Description: A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basic_auth of the file app/controllers/application_controller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 04b223813f0e336aab50bff140d0f5889c31dbec.
on about affected and unaffected releases are unavailable. The patch is named 04b223813f0e336aab50bff140d0f5889c31dbec. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221503. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221503 - https://vuldb.com/?ctiid.221503 - https://github.com/harrystech/dynosaur-rails/pull/11 - https://github.com/harrystech/dynosaur-rails/commit/04b223813f0e336aab50bff140d0f5889c31dbec
CVE ID: CVE-2015-10084 State: PUBLISHED Published: 2023-02-21T15:00:06.609Z Last Updated: 2024-08-06T08:58:26.400Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: irontec Products: klear-library Problem Types: CWE-89 Description: A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the function _prepareWhere of the file Controller/Rest/BaseController.php. The manipulation leads to sql injection. Upgrading to version marla is able to address this issue. The name of the patch is b25262de52fdaffde2a4434fc2a84408b304fbc5. It is recommended to upgrade the affected component. The identifier of this vulnerab
de52fdaffde2a4434fc2a84408b304fbc5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221504. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221504 - https://vuldb.com/?ctiid.221504 - https://github.com/irontec/klear-library/commit/b25262de52fdaffde2a4434fc2a84408b304fbc5 - https://github.com/irontec/klear-library/tree/marla