active_iq Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/active_iq/ Sun, 26 Feb 2023 06:44:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png active_iq Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/active_iq/ 32 32 CVE-2018-1000656 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1000656/ Sun, 26 Feb 2023 06:44:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1000656/ The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: […]

The post CVE-2018-1000656 appeared first on CVE Vulnerability.

]]> The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.

The post CVE-2018-1000656 appeared first on CVE Vulnerability.

]]> CVE-2019-3462 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3462/ Sun, 26 Feb 2023 06:33:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3462/ Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

The post CVE-2019-3462 appeared first on CVE Vulnerability.

]]> Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

The post CVE-2019-3462 appeared first on CVE Vulnerability.

]]> CVE-2022-24785 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-24785/ Thu, 23 Feb 2023 05:17:30 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-24785/ Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all […]

The post CVE-2022-24785 appeared first on CVE Vulnerability.

]]> Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.

The post CVE-2022-24785 appeared first on CVE Vulnerability.

]]>