GHSA-384W-5V3F-Q499 Base class whitelist configuration ignored in OAuthenticator

Impact What goes wrong? The deprecated in jupyterhub 1.2 configuration Authenticator.whitelist, which should be transparently mapped to Authenticator.allowedusers with a warning, is instead ignored by OAuthenticator classes, resulting in the same behavior as if this configuration has not been set...

December 1, 2020, update for Office 2016 (KB4486668)

None None...

Cross-site Scripting (XSS) - Generic in alibaba/bizcharts

Description bizcharts is vulnerable to Cross-Site Scripting XSS. Steps To Reproduce-: 1. Open NPM repo https://www.npmjs.com/package/bizcharts 2. Open the demo https://bizcharts.net/product/BizCharts4/gallery 3. Select any chartI used pie chart Ex: https://bizcharts.net/product/BizCharts4/demo/37...

CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

PT-2020-16434

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions prior to 743 Description The issue allows unauthenticated attackers to conduct SQL injection attacks. This is achieved via the session id parameter in the "pandora console/include/chart generator.php" endpoint...

Content Spoofing

github.com/helm/helm is vulnerable to content spoofing. Improper sanitization of the alias field on a Chart.yaml allows an attacker to inject arbitrary information in a chart...

Authorization Bypass

github.com/helm/helm is vulnerable to authorization bypass. An attacker with write access to a repository index file is able to inject a malicious chart into a repository...

CVE-2020-15185

In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker...

CVE-2020-15184

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

CVE-2020-15184

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

CVE-2020-15185: Use of Multiple Resources with Duplicate Identifier

In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker...

PT-2020-14255 · Helm +2 · Helm +2

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 2.16.11 Helm versions prior to 3.3.2 Description: The issue is related to the alias field on a Chart.yaml not being properly sanitized, which could lead to the injection of unwanted information into a chart. This was...

angular-chart (0.2.3), bit-c3 (>=0.0.1, <=0.1.3) +4 more potentially affected by CVE-2016-1000240 via c3 (>=0.3.0, <=0.4.10)

c3 NPM version =0.3.0, =0.0.1, =3.1.0, =3.3.1 Source cves: CVE-2016-1000240 Source advisory: OSV:GHSA-GVG7-PP82-CFF3...

japanesechart-template.com Cross Site Scripting vulnerability OBB-1293313

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

decimal-place-value-chart.com Cross Site Scripting vulnerability OBB-1275189

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Jira Gantt Chart Module Persistent Cross Site Scripting (CVE-2020-15944)

A persistent cross site scripting vulnerability exists in Jira Gantt Chart Module. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Atlassian Jira Gantt-Chart Information Disclosure Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. Gantt-Chart is a project management module for tracking and managing all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Gantt-Chart prior to version 5.5.4, which stems...

Atlassian Jira Gantt-Chart Cross-Site Scripting Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. Gantt-Chart is a project management module for tracking and managing all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in Atlassian Jira Gantt-Chart versions prior to 5.5.5...

Gantt-Chart For Jira 5.5.4 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications Product: Jira module "Gantt-Chart for Jira" Manufacturer: Frank Polscheit - Solutions & IT-Consulting Affected Versions: alert'XSS'" can be chosen as the name of a filter and is then d...