62 matches found
PT-2021-23938 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.7.11 Description: A vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature in Discourse, an open source discussion platform. This feature allows a tag group ...
VMware Tanzu Application Service for VMs Unauthorized Access Vulnerability
VMware Tanzu Application Service for VMs is a suite of application development and deployment solutions from VMware. A security vulnerability exists in VMware Tanzu Application Service for VMs versions 2.6.x prior to 2.6.18, 2.7.x prior to 2.7.11, and 2.8.x prior to 2.8.5. An attacker could explo...
CVE-2013-2622
Cross-site Scripting XSS in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selectedtheme" parameter in error.php...
CVE-2013-2622
Cross-site Scripting XSS in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selectedtheme" parameter in error.php...
CVE-2013-2622
CVE-2013-2622 affects UebiMiau 2.7.11 and earlier, enabling reflected XSS via the selected_theme parameter in error.php. Impact: arbitrary HTML/JavaScript execution in the user’s browser. Affected component: error.php (selected_theme). No remediation details are provided in the supplied documents.
Tautulli 2.1.9 - Cross-Site Request Forgery (ShutDown)
Exploit Title: Tautulli 2.1.9 - Cross-Site Request Forgery ShutDown Date: 2018-12-17 Exploit Author: Ismail Tasdelen Vendor Homepage: https://tautulli.com/ Software : https://github.com/Tautulli/Tautulli Product Version: v2.1.9 Platform: Windows 10 10.0.18362 Python Version: 2.7.11...
Tautulli 2.1.9 - Cross-Site Request Forgery (ShutDown) Vulnerability
Exploit for windows platform in category web applications Exploit Title: Tautulli 2.1.9 - Cross-Site Request Forgery ShutDown Exploit Author: Ismail Tasdelen Vendor Homepage: https://tautulli.com/ Software : https://github.com/Tautulli/Tautulli Product Version: v2.1.9 Platform: Windows 10...
PSF-2019-8 TALOS-2018-0758 SSL CRL distribution points Denial of Service
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted...
CVE-2019-5010
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted...
EulerOS 2.0 SP3 : python (EulerOS-SA-2019-1594)
According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509...
UBUNTU-CVE-2019-5010
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted...
Gratipay: Information Disclosure on inside.gratipay.com
Hello @gratipay, By checking request headers I've been able to identify that inside.gratipay.com is running on Server: WSGIServer/0.1 Python/2.7.11. Request: https://inside.gratipay.com/assets/inside-gratipay.svg GET /assets/inside-gratipay.svg HTTP/1.1 Host: inside.gratipay.com User-Agent:...
Internet Bug Bounty: Heap corruption via Python 2.7.11 IOBase readline()
https://bugs.python.org/issue27211...
Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the puppet package up to version 2.7.11 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability
The FishEye and Crucible plugins for JIRA are prone to an unspecified security vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of- service conditions or to disclose local sensitive files in the context of an affect...
Gentoo Security Advisory GLSA 201203-03 (puppet)
The remote host is missing updates announced in advisory GLSA 201203-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Mandriva Linux Security Advisory : pidgin (MDVSA-2011:050)
Multiple vulnerabilities has been identified and fixed in pidgin : It was discovered that libpurple versions prior to 2.7.10 do not properly clear certain data structures used in libpurple/cipher.c prior to freeing. An attacker could potentially extract partial information from memory regions fre...
Pidgin Yahoo Protocol 'YMSG' NULL Pointer Dereference DoS Vulnerability - Windows
Pidgin is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 15 : pidgin-2.7.11-1.fc15 (2011-3150)
New release 2.7.11 Full Upstream ChangeLog : http://developer.pidgin.im/wiki/ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
