Python-Markdown versions 3.0 through 3.11.2 contain an algorithmic complexity flaw in inline link parsing. A remote attacker can submit short Markdown with many unmatched [ or ![ characters, which forces quadratic scans and can keep server workers busy for minutes. No privileges or user interaction are required, but the risk only applies if an application renders Markdown from untrusted input.
Python-Markdown · Python-Markdown
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
OpenEMR before 8.5.0 contains an authenticated SQL injection in the Syndromic Surveillance module, reachable via the form_icd_codes[] parameter. An attacker with a Clinician-level account can read and modify database contents, including bcrypt password hashes, and reset passwords, which can lead to full administrative account takeover. Exploitation requires a valid clinician account; the vendor has fixed the issue in version 8.5.0.
OpenEMR · OpenEMR
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
YMS-VPN8 and YMS-VPN8-CP, VPN client software for Windows, register Windows services with unquoted file paths. A local user with write permissions on the system drive can place a program along the path and have it run with SYSTEM privileges. The attacker needs an existing local foothold, and the vulnerability is not network-exploitable.
Yamaha Corporation · YMS-VPN8 / YMS-VPN8-CP
The Yamaha NWR100 wireless LAN router firmware up to Rev.26.00.07 contains an OS command injection vulnerability (CWE-78). An attacker who sends a specially crafted request to the device can execute arbitrary OS commands without authentication. The web GUI must be reachable by the attacker, for example from a device on the LAN or Wi-Fi, because it is not exposed to the internet by default.
Yamaha Corporation · NWR100
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
