341 matches found
CVE-2021-38699
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...
Cross site scripting
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...
CVE-2021-38699
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...
esmvalcore (>=2.0.0 <=2.2.0), esque (>=0.2.0 <=0.3.1) +6 more potentially affected by CVE-2021-38305 via yamale (>=2.0.1 <=3.0.7)
yamale PYPI version =2.0.1, =2.0.0, =0.2.0, =0.0.2, =1.0.0, =0.0.1.dev3092, =0.1.0b0, =0.1.0b6 Source cves: CVE-2021-38305 Source advisory: OSV:GHSA-435P-F82X-MXWM...
CVE-2020-22873
Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code...
Jsish 缓冲区错误漏洞
Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in jsish that stems from a buffer overflow vulnerability in the NumberToPrecisionCmd function in jshish before 3.0.7. Exploitation of this vulnerability allows remote attackers to execute...
CVE-2021-22866
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed more permissions to be granted during a GitHub App's user-authorization web flow than was displayed to the user during approval. To exploit this vulnerability, an attacker would need to create a GitHub Ap...
PT-2021-6748 · Unified Automation · Unified Automation .Net Based Opc Ua Client/Server Sdk Bundle
Name of the Vulnerable Software and Affected Versions: Unified Automation .NET based OPC UA Client/Server SDK Bundle versions V3.0.7 and prior Description: The issue is related to an uncontrolled recursion that may allow an attacker to trigger a stack overflow. It is also associated with...
cyrus-imapd security update
3.0.7-19 - change ownership of pki files 1710722 3.0.7-18 - Move old changelog into separate file 1671239 3.0.7-17 - Add fix for CVE-2019-19783 - Add fix for CVE-2019-18928...
GHSA-VW7G-JQ9M-3Q9V Unauthorized File Access in glance
Versions of glance prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a --nodot option meant to hide files and directories with names that begin with a ., such as .git but fails to hide files inside a folder that begins with .. Recommendation Upgrade to version 3.0.7 ...
Security Bulletin: IBM Content Navigator is vulnerable to an Elliptic Curve Key Disclosure.
Summary IBM Content Navigator has addressed the following vulnerability. A potential vulnerability in the jose4j module could allow information disclosure. Vulnerability Details Third Party Entry: 186425 DESCRIPTION: jose.4.j library key information disclosure CVSS Base score: 8.7 CVSS Temporal...
[ASA-202006-8] python-django: multiple issues
Arch Linux Security Advisory ASA-202006-8 ========================================= Severity: Medium Date : 2020-06-06 CVE-ID : CVE-2020-13254 CVE-2020-13596 Package : python-django Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1176 Summary ======= The package...
Django Cross-Site Scripting Vulnerability (CNVD-2020-53544)
Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A cross-site scripting vulnerability exists in Django version 2.2 before 2.2.13 and version 3.0...
PYSEC-2020-31
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...
PYSEC-2020-32
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack...
CVE-2020-13254
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...
PT-2020-5484
Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.13 Django versions 3.0 before 3.0.7 Description The issue is related to errors in the certificate authentication procedure in the Django library. It may allow a remote attacker to gain unauthorized access to...
Croogo Cross-Site Scripting Vulnerability (CNVD-2020-33328)
Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in versions prior to Croogo 3.0.7. T...