CWE-115 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-115/ Sun, 26 Feb 2023 06:40:28 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-115 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-115/ 32 32 CVE-2020-27846 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-27846/ Sun, 26 Feb 2023 06:40:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-27846/ A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The post CVE-2020-27846 appeared first on CVE Vulnerability.

]]> A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The post CVE-2020-27846 appeared first on CVE Vulnerability.

]]> CVE-2021-21366 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-21366/ Thu, 23 Feb 2023 14:07:00 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-21366/ xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed […]

The post CVE-2021-21366 appeared first on CVE Vulnerability.

]]> xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed in version 0.5.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.

The post CVE-2021-21366 appeared first on CVE Vulnerability.

]]> CVE-2022-3224 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3224/ Thu, 23 Feb 2023 05:19:02 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3224/ Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

The post CVE-2022-3224 appeared first on CVE Vulnerability.

]]> Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

The post CVE-2022-3224 appeared first on CVE Vulnerability.

]]> CVE-2023-0880 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0880/ Wed, 22 Feb 2023 14:02:17 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0880 Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

The post CVE-2023-0880 appeared first on CVE Vulnerability.

]]> Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

The post CVE-2023-0880 appeared first on CVE Vulnerability.

]]>