EUVD-2006-0998

Malware in sbrugna...

EUVD-2015-4221

Malware in sbrugna...

CVE-2020-26100

chsh in cPanel before 88.0.3 allows a Jailshell escape SEC-497...

CVE-2024-36509

FortiWeb exposes encrypted administrator passwords via the Log Access Event logs page. Affects FortiWeb versions 6.3.23 and below, 7.0.10 and below, 7.2.10 and below, 7.4.3 and below, and 7.6.0. The root cause is exposure of sensitive system information to an unauthorized control sphere. Exploita...

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

CVE-2023-50180

FortiADC (Fortinet) is affected by CVE-2023-50180, where sensitive system information can be exposed to unauthorized control domains. A read-only administrator may view data pertaining to other administrators in versions 7.4.1 and below, 7.2.3 and below, 7.1.4 and below, 7.0.5 and below, and 6.2....

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-497)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-497 advisory. Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated by...

SUSE CVE-2017-9173

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...

Upgraded Q -> M from 497 [1666363365064]

Judge has assessed an item in Issue 497 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Design/Logic Flaw

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...

CVE-2022-22303

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...

CVE-2022-22303

CVE-2022-22303 affects FortiManager: an access-control weakness can allow a low-privileged authenticated user to obtain FortiGate user credentials via the config conflict file. Affected products/versions: FortiManager before 7.0.2, 6.4.7 and 6.2.9. Root cause: exposure of sensitive information in...

CVE-2022-22303

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...

CVE-2020-26100

chsh in cPanel before 88.0.3 allows a Jailshell escape SEC-497...

CVE-2020-26100

CVE-2020-26100 affects cPanel prior to 88.0.3, where the chsh component enables a Jailshell escape (SEC-497). The description across sources confirms the issue and version boundary, but detailed exploit steps or exploitability are not provided in the supplied documents. A patch is indicated by up...

filehippo.com XSS vulnerability

Vulnerable URL: http://filehippo.com/web/web-apps/%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 497 VI...

CVE-2015-4198

Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...