Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-125046 State: PUBLISHED Published: 2023-01-06T09:53:54.096Z Last Updated: 2025-04-10T13:22:13.362Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Seiji42 Products: cub-scout-tracker Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Seiji42 cub-scout-tracker. This affects an unknown part of the file databaseAccessFunctions.js. The manipulation leads to sql injection. The patch is named b4bc1a328b1f59437db159f9d136d9ed15707e31. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217551. Additional Analyst Notes: - CVE Program Container: -
sue. The associated identifier of this vulnerability is VDB-217551. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217551 - https://vuldb.com/?ctiid.217551 - https://github.com/Seiji42/cub-scout-tracker/commit/b4bc1a328b1f59437db159f9d136d9ed15707e31
CVE ID: CVE-2014-125047 State: PUBLISHED Published: 2023-01-06T11:59:39.955Z Last Updated: 2024-08-06T14:10:56.417Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: tbezman Products: school-store Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 2957fc97054216d3a393f1775efd01ae2b072001. It is recommended to apply a patch to fix this issue. The identifier VDB-217557 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217557 - h
to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217557 - https://vuldb.com/?ctiid.217557 - https://github.com/tbezman/school-store/commit/2957fc97054216d3a393f1775efd01ae2b072001
CVE ID: CVE-2014-125048 State: PUBLISHED Published: 2023-01-06T12:05:25.207Z Last Updated: 2024-08-06T14:10:56.656Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: kassi Products: xingwall Problem Types: CWE-384 Description: A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. The patch is named e9f0d509e1408743048e29d9c099d36e0e1f6ae7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217559. Additional Analyst Notes: - CVE Program Container: R
sue. The associated identifier of this vulnerability is VDB-217559. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217559 - https://vuldb.com/?ctiid.217559 - https://github.com/kassi/xingwall/commit/e9f0d509e1408743048e29d9c099d36e0e1f6ae7
CVE ID: CVE-2014-125049 State: PUBLISHED Published: 2023-01-06T12:29:56.820Z Last Updated: 2024-08-06T14:10:56.626Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: typcn Products: Blogile Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getNav of the file server.js. The manipulation of the argument query leads to sql injection. The name of the patch is cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217560. NOTE: This vulnerability only affects pro
a patch to fix this issue. The identifier of this vulnerability is VDB-217560. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217560 - https://vuldb.com/?ctiid.217560 - https://github.com/typcn/Blogile/commit/cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d
CVE ID: CVE-2014-125050 State: PUBLISHED Published: 2023-01-06T16:15:24.723Z Last Updated: 2024-11-25T17:24:15.766Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ScottTZhang Products: voter-js Problem Types: CWE-89 Description: A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch to fix this issue. VDB-217562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA A
VDB-217562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217562 - https://vuldb.com/?ctiid.217562 - https://github.com/ScottTZhang/voter-js/pull/15 - https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044
CVE ID: CVE-2014-125051 State: PUBLISHED Published: 2023-01-06T16:20:47.017Z Last Updated: 2024-08-06T14:10:56.582Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: himiklab Products: yii2-jqgrid-widget Problem Types: CWE-89 Description: A vulnerability was found in himiklab yii2-jqgrid-widget up to 1.0.7. It has been declared as critical. This vulnerability affects the function addSearchOptionsRecursively of the file JqGridAction.php. The manipulation leads to sql injection. Upgrading to version 1.0.8 is able to address this issue. The name of the patch is a117e0f2df729e3ff726968794d9a5ac40e660b9. It is recommended to upgrade the affected component. The iden
of the patch is a117e0f2df729e3ff726968794d9a5ac40e660b9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217564. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217564 - https://vuldb.com/?ctiid.217564 - https://github.com/himiklab/yii2-jqgrid-widget/commit/a117e0f2df729e3ff726968794d9a5ac40e660b9 - https://github.com/himiklab/yii2-jqgrid-widget/releases/tag/1.0.8
CVE ID: CVE-2014-125052 State: PUBLISHED Published: 2023-01-06T20:40:59.945Z Last Updated: 2024-08-06T14:10:56.605Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: JervenBolleman Products: sparql-identifiers Problem Types: CWE-89 Description: A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of the file src/main/java/org/identifiers/db/RegistryDao.java. The manipulation leads to sql injection. The patch is named 44bb0db91c064e305b192fc73521d1dfd25bde52. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217571. Additio
s recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217571. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217571 - https://vuldb.com/?ctiid.217571 - https://github.com/JervenBolleman/sparql-identifiers/commit/44bb0db91c064e305b192fc73521d1dfd25bde52
CVE ID: CVE-2014-125053 State: PUBLISHED Published: 2023-01-06T22:44:35.942Z Last Updated: 2024-08-06T14:10:56.754Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Piwigo-Guest-Book Problem Types: CWE-89 Description: A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is able to address this issue. The patch is identified as 0cdd1c388edf15089c3a7541cefe7756e560581d. It is recommended to upgrade the affecte
his issue. The patch is identified as 0cdd1c388edf15089c3a7541cefe7756e560581d. It is recommended to upgrade the affected component. VDB-217582 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217582 - https://vuldb.com/?ctiid.217582 - https://github.com/Piwigo/Piwigo-Guest-Book/commit/0cdd1c388edf15089c3a7541cefe7756e560581d - https://github.com/Piwigo/Piwigo-Guest-Book/releases/tag/1.3.1
CVE ID: CVE-2014-125054 State: PUBLISHED Published: 2023-01-07T08:45:12.149Z Last Updated: 2024-08-06T14:10:56.618Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: koroket Products: RedditOnRails Problem Types: CWE-284 Description: A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as 7f3c7407d95d532fcc342b00d68d0ea09ca71030. It is recommended to apply a patch to fix this issue. VDB-217594 is the identifier assigned to this vulnerability. Additional Ana
ommended to apply a patch to fix this issue. VDB-217594 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217594 - https://vuldb.com/?ctiid.217594 - https://github.com/koroket/RedditOnRails/commit/7f3c7407d95d532fcc342b00d68d0ea09ca71030
CVE ID: CVE-2014-125055 State: PUBLISHED Published: 2023-01-07T08:59:49.363Z Last Updated: 2024-08-06T14:10:56.603Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: agnivade Products: easy-scrypt Problem Types: CWE-208 Description: A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.0.0 is able to address this issue. The name of the patch is 477c10cf3b144ddf96526aa09f5fdea613f21812. It is recommen
n 1.0.0 is able to address this issue. The name of the patch is 477c10cf3b144ddf96526aa09f5fdea613f21812. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217596. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217596 - https://vuldb.com/?ctiid.217596 - https://github.com/agnivade/easy-scrypt/commit/477c10cf3b144ddf96526aa09f5fdea613f21812 - https://github.com/agnivade/easy-scrypt/releases/tag/v1.0.0
CVE ID: CVE-2014-125056 State: PUBLISHED Published: 2023-01-07T09:06:06.990Z Last Updated: 2024-08-06T14:10:56.644Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Pylons Products: horus Problem Types: CWE-208 Description: A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file horus/flows/local/services.py. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. It is recommended to apply a patch to fix this issue. VDB-217598
identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. It is recommended to apply a patch to fix this issue. VDB-217598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217598 - https://vuldb.com/?ctiid.217598 - https://github.com/Pylons/horus/commit/fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec
CVE ID: CVE-2014-125057 State: PUBLISHED Published: 2023-01-07T09:19:50.033Z Last Updated: 2025-04-09T19:30:13.338Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: mrobit Products: robitailletheknot Problem Types: CWE-697 Description: A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/filters.php of the component CSRF Token Handler. The manipulation of the argument _token leads to incorrect comparison. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6b2813696ccb88d0576d
plexity of an attack is rather high. The exploitability is told to be difficult. The patch is named 6b2813696ccb88d0576dfb305122ee880eb36197. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217599 - https://vuldb.com/?ctiid.217599 - https://github.com/mrobit/robitailletheknot/commit/6b2813696ccb88d0576dfb305122ee880eb36197
CVE ID: CVE-2014-125058 State: PUBLISHED Published: 2023-01-07T10:10:25.158Z Last Updated: 2024-08-06T14:10:56.663Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: LearnMeSomeCodes Products: project3 Problem Types: CWE-89 Description: A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the file search.rb. The manipulation leads to sql injection. The patch is named d3efa17ae9f6b2fc25a6bbcf165cefed17c7035e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217607. NOTE: Maintainer is aware of this issue as remarked in t
The associated identifier of this vulnerability is VDB-217607. NOTE: Maintainer is aware of this issue as remarked in the source code. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217607 - https://vuldb.com/?ctiid.217607 - https://github.com/LearnMeSomeCodes/project3/commit/d3efa17ae9f6b2fc25a6bbcf165cefed17c7035e
CVE ID: CVE-2014-125059 State: PUBLISHED Published: 2023-01-07T12:42:19.208Z Last Updated: 2024-08-06T14:10:56.667Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: sternenseemann Products: sternenblog Problem Types: CWE-73 Description: A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_index of the file main.c. The manipulation of the argument post_path leads to file inclusion. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 0.1.0 is able to address this issue. The identifier of
The exploitation is known to be difficult. Upgrading to version 0.1.0 is able to address this issue. The identifier of the patch is cf715d911d8ce17969a7926dea651e930c27e71a. It is recommended to upgrade the affected component. The identifier VDB-217613 was assigned to this vulnerability. NOTE: This case is rather theoretical and probably won't happen. Maybe only on obscure Web servers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217613 - https://vuldb.com/?ctiid.217613 - https://github.com/sternenseemann/sternenblog/commit/cf715d911d8ce17969a7926dea651e930c27e71a - https://github.com/sternenseemann/sternenblog/releases/tag/
ternenblog/commit/cf715d911d8ce17969a7926dea651e930c27e71a - https://github.com/sternenseemann/sternenblog/releases/tag/0.1.0
CVE ID: CVE-2014-125060 State: PUBLISHED Published: 2023-01-07T12:44:59.019Z Last Updated: 2024-08-06T14:10:56.612Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: holdennb Products: CollabCal Problem Types: CWE-287 Description: A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as b80f6d1893607c99e5113967592417d0fe310ce6. It is recommended to apply a patch to fix this issue. VDB-217614 is the identifier assigned to this vulnerability. Additional Analyst Notes:
apply a patch to fix this issue. VDB-217614 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217614 - https://vuldb.com/?ctiid.217614 - https://github.com/holdennb/CollabCal/commit/b80f6d1893607c99e5113967592417d0fe310ce6
CVE ID: CVE-2014-125061 State: PUBLISHED Published: 2023-01-07T12:53:36.957Z Last Updated: 2024-08-06T14:10:56.598Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: peel Products: filebroker Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the function select_transfer_status_desc of the file lib/common.rb. The manipulation leads to sql injection. The name of the patch is 91097e26a6c84d3208a351afaa52e0f62e5853ef. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217616. NOTE: This vulnerability onl
ded to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217616. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217616 - https://vuldb.com/?ctiid.217616 - https://github.com/peel/filebroker/commit/91097e26a6c84d3208a351afaa52e0f62e5853ef
CVE ID: CVE-2014-125062 State: PUBLISHED Published: 2023-01-07T16:30:51.364Z Last Updated: 2024-08-06T14:10:56.602Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ananich Products: bitstorm Problem Types: CWE-89 Description: A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the file announce.php. The manipulation of the argument event leads to sql injection. The identifier of the patch is ea8da92f94cdb78ee7831e1f7af6258473ab396a. It is recommended to apply a patch to fix this issue. The identifier VDB-217621 was assigned to this vulnerability. Additional Analyst Notes: - CVE P
patch to fix this issue. The identifier VDB-217621 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217621 - https://vuldb.com/?ctiid.217621 - https://github.com/ananich/bitstorm/commit/ea8da92f94cdb78ee7831e1f7af6258473ab396a
CVE ID: CVE-2014-125063 State: PUBLISHED Published: 2023-01-07T18:37:50.080Z Last Updated: 2024-10-15T17:12:41.424Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ada-l0velace Products: Bid Problem Types: CWE-89 Description: A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The identifier VDB-217625 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
gned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217625 - https://vuldb.com/?ctiid.217625 - https://github.com/ada-l0velace/Bid/commit/abd71140b8219fa8741d0d8a57ab27d5bfd34222
CVE ID: CVE-2014-125064 State: REJECTED Published: 2023-01-07T19:40:06.552Z Last Updated: 2025-02-13T15:46:09.729Z Description: No description available.
CVE ID: CVE-2014-125065 State: PUBLISHED Published: 2023-01-07T19:39:56.072Z Last Updated: 2024-08-06T14:10:56.654Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: john5223 Products: bottle-auth Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is 99cfbcc0c1429096e3479744223ffb4fda276875. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217632. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb
y is VDB-217632. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217632 - https://vuldb.com/?ctiid.217632 - https://github.com/john5223/bottle-auth/commit/99cfbcc0c1429096e3479744223ffb4fda276875
CVE ID: CVE-2014-125066 State: PUBLISHED Published: 2023-01-08T08:58:22.267Z Last Updated: 2024-08-06T14:10:56.712Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: emmflo Products: yuko-bot Problem Types: CWE-404 Description: A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument title leads to denial of service. The attack can be initiated remotely. The name of the patch is e580584b877934a4298d4dd0c497c79e579380d0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217636. Additional Analyst Notes: - CISA ADP V
ly a patch to fix this issue. The identifier of this vulnerability is VDB-217636. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217636 - https://vuldb.com/?ctiid.217636 - https://github.com/emmflo/yuko-bot/commit/e580584b877934a4298d4dd0c497c79e579380d0
CVE ID: CVE-2014-125067 State: PUBLISHED Published: 2023-01-08T09:09:51.287Z Last Updated: 2024-08-06T14:10:56.639Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: corincerami Products: curiosity Problem Types: CWE-89 Description: A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of the file app/controllers/image_controller.rb. The manipulation of the argument sol leads to sql injection. The patch is named d64fddd74ca72714e73f4efe24259ca05c8190eb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217639. Additional An
mmended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217639. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217639 - https://vuldb.com/?ctiid.217639 - https://github.com/corincerami/curiosity/commit/d64fddd74ca72714e73f4efe24259ca05c8190eb
CVE ID: CVE-2014-125068 State: PUBLISHED Published: 2023-01-08T10:28:56.453Z Last Updated: 2024-08-06T14:10:56.691Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: saxman Products: maps-js-icoads Problem Types: CWE-22 Description: A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217643. Additional Analyst Notes: - CVE Program Container: References: -
ciated identifier of this vulnerability is VDB-217643. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217643 - https://vuldb.com/?ctiid.217643 - https://github.com/saxman/maps-js-icoads/commit/34b8b0cce2807b119f4cffda2ac48fc8f427d69a