Priority LOW 29
The Dart and Flutter SDKs provide software development kits for the Dart programming language.
Vulnerabilities
14 records
TI-2014-08398 CVE-2014-125098 · GHSA-3vf7-gh27-gx55
Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting
Priority LOW 28
A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic.
Priority MEDIUM 51
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards.
TI-2022-00374 CVE-2022-0451
Auth bypass in Dark SDK
Priority LOW 31
Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects.
TI-2021-05521 CVE-2021-22567
Bidirectional Override in Dart SDK
Priority LOW 22
Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign.
TI-2021-05522 CVE-2021-22568
Dart - Publishing to third-party package repositories may expose pub.dev credentials
Priority MEDIUM 40
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev.
TI-2021-05505 CVE-2021-22540 · GHSA-36mh-f84c-9fqq
XSS in Dart SDK
Priority LOW 28
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering.
TI-2020-18144 CVE-2020-35669 · GHSA-4rgh-jx4f-qfcq
An issue was discovered in the http package through 0.12.2 for Dart.
Priority LOW 31
An issue was discovered in the http package through 0.12.2 for Dart.
TI-2020-07164 CVE-2020-8923
Cross-site scripting in Google Dart SDK
Priority LOW 27
An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the sanitization and inject custom html/javascript…
TI-2012-04562 CVE-2012-5389 · GHSA-5x29-vh6x-c2jx
NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows…
Priority MEDIUM 42
NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request.
TI-2012-03302 CVE-2012-3819 · GHSA-x89g-7xc8-82x2
Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart…
Priority LOW 27
Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service (daemon crash) via a long requ…
TI-2008-04435 CVE-2008-4652 · GHSA-fg22-v593-xvx7
Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP…
Priority MEDIUM 52
Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property.
TI-2007-02763 CVE-2007-2856 · GHSA-6qvq-hqc7-q3cj
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in…
Priority MEDIUM 50
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long fir…
TI-2007-02762 CVE-2007-2855 · GHSA-2wj8-f7pq-vfpf
Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite…
Priority MEDIUM 48
Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip fu…