39 matches found
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...
CVE-2020-17519
The Apache Flink streaming and batch data processing platform is vulnerable to a directory traversal and improper access control issue in its REST interface component. This vulnerability allows an attacker to read arbitrary files on the JobManager local filesystem, restricted to files accessible ...
Apache Flink JobManager Traversal
This module exploits an unauthenticated directory traversal vulnerability in Apache Flink versions 1.11.0 use auxiliary/scanner/http/apache/flinkjobmanagertraversal msf undefinedflinkjobmanagertraversal show actions ...actions... msf undefinedflinkjobmanagertraversal set ACTION msf...
Design/Logic Flaw
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central deviceThis CVE is equivalent to Link Layer Length Overfow issue CVE-2019-16336,CVE-2019-17519 and Silent Length Overflow issueCVE-2019-17518 mentioned in...
CVE-2020-3703
The connected Red Hat CVE entries confirm a concrete BLE Link Layer handling flaw: Cypress PSoC 4 BLE component
CVE-2019-17519
The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet...
CVE-2019-17519
The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet...
CVE-2019-17519
The CVE-2019-17519 issue affects NXP Bluetooth Low Energy in the KW41Z SDK (up to v2.2.1). The root cause is failure to properly restrict the Link Layer payload length, enabling attackers in radio range to trigger a buffer overflow with a crafted packet. The SweynTooth report and Red Hat/NVD refe...
3CX Cross-Site Scripting Vulnerability (CNVD-2018-17519)
3CX is an IP telephony device from 3CX USA. A cross-site scripting vulnerability exists in the 'propertyPath' parameter of the stack trace of the web server in version 15.5.8801.3 of 3CX. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2017-17519
batteriesConfig.mlp in OCaml Batteries Included aka ocaml-batteries 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17519
batteriesConfig.mlp in OCaml Batteries Included aka ocaml-batteries 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17519
batteriesConfig.mlp in OCaml Batteries Included aka ocaml-batteries 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17519
Affected software: OCaml Batteries Included (aka ocaml-batteries) 2.6. Component: batteriesConfig.mlp. Issue: the configuration file does not validate strings before launching the program specified by the BROWSER environment variable, enabling remote attackers to perform argument-injection via a ...
PAJAX Remote Command Execution
No description provided by source. $Id: pajaxremoteexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
PAJAX - Remote Command Execution (Metasploit)
$Id: pajaxremoteexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
PAJAX Remote Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'PAJAX Remote...