Skip to content
OpenAdvisories

Archive

29 November 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.5

    code-projects Farmacia pagamento.php cross site scripting

    A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /pagamento.php. The manipulation of the argument total leads to cross site scripting. The attack…

  • Low 2.2

    Issuer field partial matches allowed in pyjwt

    pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version 2.10.0: checking the "iss" claim changed from `isinstance(issu…

  • Low 2.3
    CVE-2024-52800 Public exploit

    Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

    veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution (RCE) vulnerability. This doesn't affect the standard va…

  • Low 3.1

    Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary application…