Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2024-37931
4.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): Low (L)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): None (N)
updated 5 months ago by @LeSuisse Activity log
  • Created suggestion 10 months, 1 week ago
  • @LeSuisse ignored
    76 packages
    • pinpoint
    • git-point
    • ratpoints
    • mountpoint-s3
    • breakpointHook
    • libpointmatcher
    • xpointerbarrier
    • highlight-pointer
    • breakpointHookCntr
    • quake3pointrelease
    • haskellPackages.pointed
    • haskellPackages.fixpoint
    • haskellPackages.pointfree
    • python312Packages.pypoint
    • python313Packages.pypoint
    • haskellPackages.breakpoint
    • haskellPackages.mountpoints
    • haskellPackages.pointedlist
    • python312Packages.datapoint
    • python313Packages.datapoint
    • haskellPackages.pointless-fun
    • python312Packages.entrypoint2
    • python312Packages.entrypoints
    • python312Packages.jsonpointer
    • python313Packages.entrypoint2
    • python313Packages.entrypoints
    • python313Packages.jsonpointer
    • gnomeExtensions.pointer-tracker
    • rubyPackages.indieweb-endpoints
    • haskellPackages.amazonka-pinpoint
    • python312Packages.fastentrypoints
    • python313Packages.fastentrypoints
    • typstPackages.stack-pointer_0_1_0
    • python312Packages.entry-points-txt
    • python312Packages.orbax-checkpoint
    • python313Packages.entry-points-txt
    • python313Packages.orbax-checkpoint
    • typstPackages.pointless-size_0_1_0
    • typstPackages.pointless-size_0_1_1
    • rubyPackages_3_1.indieweb-endpoints
    • rubyPackages_3_2.indieweb-endpoints
    • rubyPackages_3_3.indieweb-endpoints
    • rubyPackages_3_4.indieweb-endpoints
    • home-assistant-component-tests.point
    • haskellPackages.acme-pointful-numbers
    • python312Packages.mypy-boto3-pinpoint
    • python313Packages.mypy-boto3-pinpoint
    • python312Packages.checkpoint-schedules
    • python312Packages.langgraph-checkpoint
    • python313Packages.checkpoint-schedules
    • python313Packages.langgraph-checkpoint
    • haskellPackages.amazonka-pinpoint-email
    • haskellPackages.amazonka-pinpoint-sms-voice
    • python312Packages.mypy-boto3-pinpoint-email
    • python313Packages.mypy-boto3-pinpoint-email
    • python312Packages.types-aiobotocore-pinpoint
    • python313Packages.types-aiobotocore-pinpoint
    • python312Packages.langgraph-checkpoint-sqlite
    • python313Packages.langgraph-checkpoint-sqlite
    • haskellPackages.amazonka-pinpoint-sms-voice-v2
    • python312Packages.langgraph-checkpoint-postgres
    • python312Packages.mypy-boto3-pinpoint-sms-voice
    • python313Packages.langgraph-checkpoint-postgres
    • python313Packages.mypy-boto3-pinpoint-sms-voice
    • python312Packages.mypy-boto3-pinpoint-sms-voice-v2
    • python312Packages.types-aiobotocore-pinpoint-email
    • python313Packages.mypy-boto3-pinpoint-sms-voice-v2
    • python313Packages.types-aiobotocore-pinpoint-email
    • python312Packages.backports-entry-points-selectable
    • python313Packages.backports-entry-points-selectable
    • python312Packages.types-aiobotocore-pinpoint-sms-voice
    • python313Packages.types-aiobotocore-pinpoint-sms-voice
    • python312Packages.azure-synapse-managedprivateendpoints
    • python313Packages.azure-synapse-managedprivateendpoints
    • python312Packages.types-aiobotocore-pinpoint-sms-voice-v2
    • python313Packages.types-aiobotocore-pinpoint-sms-voice-v2
    5 months ago
  • @LeSuisse dismissed 5 months ago
WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Creativthemes Point allows Cross Site Request Forgery.This issue affects Point: from n/a through 1.1.

Affected products

point
  • =<1.1
Ignored packages (76)

pkgs.pinpoint

Tool for making hackers do excellent presentations

  • nixos-unstable -

pkgs.git-point

Set arbitrary refs without shooting yourself in the foot, a procelain `git update-ref`

  • nixos-unstable -

pkgs.ratpoints

Program to find rational points on hyperelliptic curves

  • nixos-unstable -

pkgs.mountpoint-s3

Simple, high-throughput file client for mounting an Amazon S3 bucket as a local file system

  • nixos-unstable -

pkgs.libpointmatcher

"Iterative Closest Point" library for 2-D/3-D mapping in robotic

  • nixos-unstable -

pkgs.xpointerbarrier

Create X11 pointer barriers around your working area

  • nixos-unstable -

pkgs.highlight-pointer

Highlight mouse pointer/cursor using a dot

  • nixos-unstable -
    • nixpkgs-unstable 1.2

pkgs.typstPackages.pointless-size_0_1_0

中文字号的号数制及字体度量单位 Chinese size system (hào-system) and type-related measurements units

  • nixos-unstable -

pkgs.typstPackages.pointless-size_0_1_1

中文字号的号数制及字体度量单位 Chinese size system (hào-system) and type-related measurements units

  • nixos-unstable - 
WP theme not present in nixpkgs