CVE-2022-39280
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a […]
İçeriği inceleyinSaleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which […]
İçeriği inceleyinLoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4.7.0 are vulnerable to a […]
İçeriği inceleyinFlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the […]
İçeriği inceleyinDiscoTOC is a Discourse theme component that generates a table of contents for topics. Users that can create topics in TOC-enabled categories […]
İçeriği inceleyinPJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from […]
İçeriği inceleyinMyBB is a free and open source forum software. The _Mail Settings_ → Additional Parameters for PHP’s mail() function mail_parameters setting value, […]
İçeriği inceleyinPJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP […]
İçeriği inceleyinsyslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash […]
İçeriği inceleyinDex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by […]
İçeriği inceleyinIBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed […]
İçeriği inceleyinThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets […]
İçeriği inceleyin