627 matches found
Nimble 信任管理问题漏洞
Nimble is an open source package manager for the Nim programming language. Nimble before versions 1.2.10 and 1.4.4 suffers from a trust management issue vulnerability that can be exploited by an attacker to deliver a modified list of packages containing malware packages. If the package is install...
AZL-44910 CVE-2021-21334 affecting package cri-o 1.30.1-1
In containerd an industry-standard container runtime before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image may receive incorrect...
CVE-2021-21334
In containerd an industry-standard container runtime before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image may receive incorrect...
containerd 安全漏洞
containerd is a container daemon from the Apache Foundation. The process is responsible for controlling the full cycle of containers on the host according to the RunC OCI specification. A security vulnerability exists in containerd before versions 1.3.10 and 1.4.4 that allows sharing of sensitive...
CVE-2021-21354
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://pollbot.services.mozilla.com/". An...
CVE-2021-21354
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://pollbot.services.mozilla.com/". An...
Open redirect
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://pollbot.services.mozilla.com/". An...
CVE-2021-21354 Open redirect in pollbot
Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://pollbot.services.mozilla.com/". An...
CVE-2021-21354
Pollbot (open source) before version 1.4.4 contains an open redirect vulnerability in the path https://pollbot.services.mozilla.com/. An attacker can induce redirection to a attacker-controlled site (e.g., via a payload like //evil.com/). The issue affects versions prior to 1.4.4 and is fixed in ...
WordPress site-offline plugin cross-site request forgery vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress site-offline plugin prior to...
WordPress 跨站请求伪造漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress site-offline plugin prior to...
GHSA-9HQJ-38J2-5JGM Command Injection in ascii-art
Versions of ascii-art before 1.4.4 are vulnerable to command injection. This is exploitable when user input is passed into the argument of the ascii-art preview command. Example Proof of concept: ascii-art preview 'doom"; touch /tmp/malicious; echo "' Given that the input is passed on the command...
Command Injection in ascii-art
Versions of ascii-art before 1.4.4 are vulnerable to command injection. This is exploitable when user input is passed into the argument of the ascii-art preview command. Example Proof of concept: ascii-art preview 'doom"; touch /tmp/malicious; echo "' Given that the input is passed on the command...
CVE-2020-16251
CVE-2020-16251 affects HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer when configured with the GCP GCE auth method. The issue allows authentication bypass due to a flaw in the GCP authentication flow. Fixed in Vault/Vault Enterprise releases 1.2.5, 1.3.8, 1.4.4, and 1.5.1. The avai...
CVE-2020-16251
HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1...
CVE-2020-16251
HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1...
CVE-2020-16250
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1...
Security Bulletin: IBM TNPM for Wireline is vulnarable to Cross Site Request Forgery(CSRF) and Cross Site Scripting(CSS)
Summary IBM TNPM for Wireline is vulnarable to Cross Site Request ForgeryCSRF and Cross Site ScriptingCSS . This has been addressed. Vulnerability Details Third Party Entry: PSIRT-ADV0016782 DESCRIPTION: CVSS Base score: 5.4 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Third Party...
Unspecified Vulnerability in MISP MISP-maltego
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis.MISP-maltego is a Maltego MISP integration tool that enables you to view the data in your...