Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-11085 State: PUBLISHED Published: 2020-08-16T17:17:22 Last Updated: 2024-08-06T03:47:34.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the question_name parameter because js/admin_question.js mishandles parsing inside of a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/csrfstored-xss-in-quiz-and-survey-master-formerly-quiz-master-next-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/
CVE ID: CVE-2016-11086 State: PUBLISHED Published: 2020-09-24T19:34:18 Last Updated: 2024-08-06T03:47:34.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oauth-xx/oauth-ruby/issues/137
CVE ID: CVE-2016-15001 State: REJECTED Published: 2020-12-10T19:50:15 Last Updated: 2020-12-10T19:50:15 Description: No description available.
CVE ID: CVE-2016-15002 State: PUBLISHED Published: 2022-06-09T06:15:14.000Z Last Updated: 2025-04-15T14:31:46.703Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: MONyog Ultimate Problem Types: CWE-269 Description: A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/KKlwi-u6wyA - https://vuldb.com/?id.98355
CVE ID: CVE-2016-15003 State: PUBLISHED Published: 2022-07-18T08:35:11.000Z Last Updated: 2025-04-15T14:04:41.448Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: FileZilla Products: Client Problem Types: CWE-428 Description: A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/39803/ - https://youtu.be/r06VwwJ9J4M - https://vuldb.com/?id.97204
CVE ID: CVE-2016-15004 State: PUBLISHED Published: 2022-07-23T06:45:14.000Z Last Updated: 2025-04-14T16:00:15.958Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: InfiniteWP Client Plugin Problem Types: CWE-74 Description: A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2017/Jan/72 - https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html - https://vuldb.com/?id.96073
CVE ID: CVE-2016-15005 State: PUBLISHED Published: 2022-12-27T21:13:27.393Z Last Updated: 2025-04-11T16:39:25.100Z Vendors: github.com/dinever/golf Products: github.com/dinever/golf Problem Types: CWE 338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Description: CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dinever/golf/pull/24 - https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f
- https://github.com/dinever/golf/pull/24 - https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f1fe - https://github.com/dinever/golf/issues/20 - https://pkg.go.dev/vuln/GO-2020-0045
CVE ID: CVE-2016-15006 State: PUBLISHED Published: 2023-01-02T07:59:38.347Z Last Updated: 2024-08-06T03:47:34.787Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: enigmaX Problem Types: CWE-337 Description: A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The manipulation leads to predictable seed in pseudo-random number generator (prng). The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.3 is able to address t
ty of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.3 is able to address this issue. The identifier of the patch is 922bf90ca14a681629ba0b807a997a81d70225b5. It is recommended to upgrade the affected component. The identifier VDB-217181 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217181 - https://vuldb.com/?ctiid.217181 - https://github.com/pfmonville/enigmaX/commit/922bf90ca14a681629ba0b807a997a81d70225b5 - https://github.com/pfmonville/enigmaX/releases/tag/2.3
CVE ID: CVE-2016-15007 State: PUBLISHED Published: 2023-01-02T18:36:41.878Z Last Updated: 2024-08-06T03:47:34.787Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Centralized-Salesforce-Dev-Framework Problem Types: CWE-74 Description: A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to injection. The patch is named db03ac5b8a9d830095991b529c067a030a0ccf7b. It is recommended to apply a patch to fix this i
injection. The patch is named db03ac5b8a9d830095991b529c067a030a0ccf7b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217195. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217195 - https://vuldb.com/?ctiid.217195 - https://github.com/scottbcovert/Centralized-Salesforce-Dev-Framework/commit/db03ac5b8a9d830095991b529c067a030a0ccf7b
CVE ID: CVE-2016-15008 State: PUBLISHED Published: 2023-01-04T09:32:30.471Z Last Updated: 2024-08-06T03:47:34.914Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: oxguy3 Products: coebot-www Problem Types: CWE-79 Description: A vulnerability was found in oxguy3 coebot-www and classified as problematic. This issue affects the function displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoir of the file js/channel.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named c1a6c44092585da4236237e0e7da94ee2996a0ca. It is recommended to apply a patch to fix this issue. The associated id
named c1a6c44092585da4236237e0e7da94ee2996a0ca. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217355. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217355 - https://vuldb.com/?ctiid.217355 - https://github.com/oxguy3/coebot-www/commit/c1a6c44092585da4236237e0e7da94ee2996a0ca
CVE ID: CVE-2016-15009 State: PUBLISHED Published: 2023-01-05T08:09:22.937Z Last Updated: 2024-11-25T17:50:29.611Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: OpenACS Products: bug-tracker Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is aee43e5714cd8b697355ec3bf83eefee176d3fc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217440. Additional Analyst No
ecommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217440. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217440 - https://vuldb.com/?ctiid.217440 - https://github.com/openacs/bug-tracker/commit/aee43e5714cd8b697355ec3bf83eefee176d3fc3
CVE ID: CVE-2016-15010 State: PUBLISHED Published: 2023-01-05T08:42:26.605Z Last Updated: 2024-08-06T03:47:34.846Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: University of Cambridge Products: django-ucamlookup Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.9.2 is able to address this issue. The identifier of the patch is 5e25e4765637ea4b9e0bf5fcd5e9a92
Upgrading to version 1.9.2 is able to address this issue. The identifier of the patch is 5e25e4765637ea4b9e0bf5fcd5e9a922abee7eb3. It is recommended to upgrade the affected component. The identifier VDB-217441 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217441 - https://vuldb.com/?ctiid.217441 - https://github.com/uisautomation/django-ucamlookup/commit/5e25e4765637ea4b9e0bf5fcd5e9a922abee7eb3 - https://github.com/uisautomation/django-ucamlookup/releases/tag/1.9.2
CVE ID: CVE-2016-15011 State: PUBLISHED Published: 2023-01-06T09:46:20.281Z Last Updated: 2024-08-06T03:47:34.910Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: e-Contract Products: dssp Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference. Upgrading to version 1.3.2 is able to address this issue. The identifier of the patch is ec4238349691ec66dd30b416ec6eaab02d722302. It is recomme
.2 is able to address this issue. The identifier of the patch is ec4238349691ec66dd30b416ec6eaab02d722302. It is recommended to upgrade the affected component. The identifier VDB-217549 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217549 - https://vuldb.com/?ctiid.217549 - https://github.com/e-Contract/dssp/commit/ec4238349691ec66dd30b416ec6eaab02d722302 - https://github.com/e-Contract/dssp/releases/tag/dssp-1.3.2
CVE ID: CVE-2016-15012 State: PUBLISHED Published: 2023-01-07T12:59:27.772Z Last Updated: 2025-04-08T20:30:50.208Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: forcedotcom Products: SalesforceMobileSDK-Windows Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to version 5.0.0 is able to address this issue. The patch is named 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8. It is reco
to version 5.0.0 is able to address this issue. The patch is named 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217619. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217619 - https://vuldb.com/?ctiid.217619 - https://github.com/forcedotcom/SalesforceMobileSDK-Windows/commit/83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8 - https://github.com/forcedotcom/SalesforceMobileSDK-Windows/releases/tag/v5.0.0
CVE ID: CVE-2016-15013 State: PUBLISHED Published: 2023-01-07T19:31:33.664Z Last Updated: 2025-05-28T13:30:27.148Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ForumHulp Products: searchresults Problem Types: CWE-89 Description: A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function list_keywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217628. Additional Analyst Notes: - C
ed to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217628. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217628 - https://vuldb.com/?ctiid.217628 - https://github.com/ForumHulp/searchresults/pull/2 - https://github.com/ForumHulp/searchresults/commit/dd8a312bb285ad9735a8e1da58e9e955837b7322
CVE ID: CVE-2016-15014 State: PUBLISHED Published: 2023-01-07T19:42:46.836Z Last Updated: 2024-08-06T03:47:34.921Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CESNET Products: theme-cesnet Problem Types: CWE-522 Description: A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials. Attacking locally is a requirement. Upgrading to version 2.0.0 is able to address this issue. The identifier of the patch is 2b857f2233ce5083b4d
equirement. Upgrading to version 2.0.0 is able to address this issue. The identifier of the patch is 2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6. It is recommended to upgrade the affected component. The identifier VDB-217633 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217633 - https://vuldb.com/?ctiid.217633 - https://github.com/CESNET/theme-cesnet/pull/1 - https://github.com/CESNET/theme-cesnet/commit/2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6 - https://github.com/CESNET/theme-cesnet/releases/tag/2.0.0
CVE ID: CVE-2016-15015 State: PUBLISHED Published: 2023-01-08T17:15:32.447Z Last Updated: 2024-08-06T03:47:34.830Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: viafintech Products: Barzahlen Payment Module PHP SDK Problem Types: CWE-208 Description: A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 3
tability is told to be difficult. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 3e7d29dc0ca6c054a6d6e211f32dae89078594c1. It is recommended to upgrade the affected component. VDB-217650 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217650 - https://vuldb.com/?ctiid.217650 - https://github.com/viafintech/Barzahlen-PHP/pull/8 - https://github.com/viafintech/Barzahlen-PHP/commit/3e7d29dc0ca6c054a6d6e211f32dae89078594c1 - https://github.com/viafintech/Barzahlen-PHP/releases/tag/v2.0.1
CVE ID: CVE-2016-15016 State: PUBLISHED Published: 2023-01-08T17:22:48.308Z Last Updated: 2024-08-06T03:47:34.961Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: mrtnmtth Products: joomla_mod_einsatz_stats Problem Types: CWE-89 Description: A vulnerability was found in mrtnmtth joomla_mod_einsatz_stats up to 0.2. It has been classified as critical. This affects the function getStatsByType of the file helper.php. The manipulation of the argument year leads to sql injection. Upgrading to version 0.3 is able to address this issue. The identifier of the patch is 27c1b443cff45c81d9d7d926a74c76f8b6ffc6cb. It is recommended to upgrade the affected component. The i
ier of the patch is 27c1b443cff45c81d9d7d926a74c76f8b6ffc6cb. It is recommended to upgrade the affected component. The identifier VDB-217653 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217653 - https://vuldb.com/?ctiid.217653 - https://github.com/mrtnmtth/joomla_mod_einsatz_stats/commit/27c1b443cff45c81d9d7d926a74c76f8b6ffc6cb - https://github.com/mrtnmtth/joomla_mod_einsatz_stats/releases/tag/v0.3
CVE ID: CVE-2016-15017 State: PUBLISHED Published: 2023-01-10T14:04:49.684Z Last Updated: 2024-08-06T03:47:34.829Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: fabarea Products: media_upload Problem Types: CWE-21 Description: A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.php. The manipulation leads to pathname traversal. Upgrading to version 0.9.0 is able to address this issue. The patch is identified as b25d42a4981072321c1a363311d8ea2a4ac8763a. It is recommended to upgrade the affected component. VDB-2177
is identified as b25d42a4981072321c1a363311d8ea2a4ac8763a. It is recommended to upgrade the affected component. VDB-217786 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217786 - https://vuldb.com/?ctiid.217786 - https://github.com/fabarea/media_upload/issues/6 - https://github.com/fabarea/media_upload/commit/b25d42a4981072321c1a363311d8ea2a4ac8763a - https://github.com/fabarea/media_upload/releases/tag/0.9.0
CVE ID: CVE-2016-15018 State: PUBLISHED Published: 2023-01-15T18:58:04.715Z Last Updated: 2024-08-06T03:47:34.645Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: krail-jpa Problem Types: CWE-89 Description: A vulnerability was found in krail-jpa up to 0.9.1. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version 0.9.2 is able to address this issue. The identifier of the patch is c1e848665492e21ef6cc9be443205e36b9a1f6be. It is recommended to upgrade the affected component. The identifier VDB-218373 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ffected component. The identifier VDB-218373 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218373 - https://vuldb.com/?ctiid.218373 - https://github.com/KrailOrg/krail-jpa/issues/18 - https://github.com/KrailOrg/krail-jpa/commit/c1e848665492e21ef6cc9be443205e36b9a1f6be - https://github.com/KrailOrg/krail-jpa/releases/tag/0.9.2
CVE ID: CVE-2016-15019 State: PUBLISHED Published: 2023-01-15T18:58:05.906Z Last Updated: 2025-04-08T18:15:40.549Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: tombh Products: jekbox Problem Types: CWE-548 Description: A vulnerability was found in tombh jekbox. It has been rated as problematic. This issue affects some unknown processing of the file lib/server.rb. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The patch is named 64eb2677671018fc08b96718b81e3dbc83693190. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218375. Addi
t is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218375. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218375 - https://vuldb.com/?ctiid.218375 - https://github.com/tombh/jekbox/commit/64eb2677671018fc08b96718b81e3dbc83693190
CVE ID: CVE-2016-15020 State: PUBLISHED Published: 2023-01-16T10:58:04.994Z Last Updated: 2024-08-06T03:47:35.008Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: liftkit Products: database Problem Types: CWE-89 Description: A vulnerability was found in liftkit database up to 2.13.1. It has been classified as critical. This affects the function processOrderBy of the file src/Query/Query.php. The manipulation leads to sql injection. Upgrading to version 2.13.2 is able to address this issue. The patch is named 42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-21
b21d125a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218391. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218391 - https://vuldb.com/?ctiid.218391 - https://github.com/liftkit/database/commit/42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a - https://github.com/liftkit/database/releases/tag/v2.13.2
CVE ID: CVE-2016-15021 State: PUBLISHED Published: 2023-01-17T14:58:05.056Z Last Updated: 2025-04-04T18:36:25.955Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: nickzren Products: alsdb Problem Types: CWE-89 Description: A vulnerability was found in nickzren alsdb. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version v2 is able to address this issue. The identifier of the patch is cbc79a68145e845f951113d184b4de207c341599. It is recommended to upgrade the affected component. The identifier VDB-218429 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ffected component. The identifier VDB-218429 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218429 - https://vuldb.com/?ctiid.218429 - https://github.com/nickzren/alsdb/commit/cbc79a68145e845f951113d184b4de207c341599 - https://github.com/nickzren/alsdb/releases/tag/v2