GHSA-42GV-77F4-R3J9 Shopware SQL Injection

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

CVE-2021-43519 affecting package lua for versions less than 5.4.3-1

CVE-2021-43519 affecting package lua for versions less than 5.4.3-1. A patched version of the package is available...

Lua 资源管理错误漏洞

Lua is a lightweight, extended open source scripting language from the Lua LUA team. Lua interpreter versions 5.4.0 through 5.4.3 are vulnerable to a resource management error, which can be exploited by attackers to execute Sandbox Escape via a specially crafted script file...

Symfony 5.3.14, 5.4.3, 6.0.3 CSRF Vulnerability (GHSA-vvmr-8829-6whx)

Symfony is prone to a missing cross-site request forgery CSRF token vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...

PT-2022-12269

Name of the Vulnerable Software and Affected Versions Lua interpreter versions 5.4.0 through 5.4.3 Description The issue is related to a use after free in the garbage collector and finalizer of lgc.c in the Lua interpreter. This allows attackers to perform a Sandbox Escape via a crafted script...

CVE-2021-43519

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

New Zoom Screen-Sharing Bug Lets Other Users Access Restricted Apps

A newly discovered glitch in Zoom's screen sharing feature can accidentally leak sensitive information to other attendees in a call, according to the latest findings. Tracked as CVE-2021-28133, the unpatched security vulnerability makes it possible to reveal contents of applications that are not...

@abdullah2993/web-ext-webpack-plugin (1.0.0), @airy/maleo (>=0.0.1-canary.49, <=0.3.1-canary.36) +148 more potentially affected by CVE-2020-7789 via node-notifier (>=5.0.2, <=5.4.3)

node-notifier NPM version =5.0.2, =0.0.1-canary.49, =1.0.0, =0.1.0, =0.1.0, =0.1.1-alpha.0, =0.10.30, =2.0.0-beta.1, =1.7.0, =2.29.0, =2.94.0 and more Source cves: CVE-2020-7789 Source advisory: SNYK:JS-NODENOTIFIER-1035794...

WordPress Multiple Vulnerabilities (Oct 2020) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

vBulletin 5.4.3 Open Redirect Vulnerability

According to the self-reported version in its response header, the version of vBulletin hosted on the remote web server is 5.4.4. It is, therefore, affected by an open redirect vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's...

CVE-2018-20713

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

CVE-2018-15493

vBulletin 5.4.3 has an Open Redirect...

CVE-2018-15493

CVE-2018-15493 affects vBulletin 5.x, specifically version 5.4.3, describing an Open Redirect vulnerability. Public sources in the connected documents consistently state an open redirect for vBulletin 5.4.3; CVSS metrics show base scores: CVSS2 v2.0 5.8 (partial confidentiality and integrity impa...

CVE-2018-15493

vBulletin 5.4.3 has an Open Redirect...

Elastic Kibana X-Pack 'CVE-2017-8443' Information Disclosure Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana X-Pack 'CVE-2017-8442' Information Disclosure Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiManager Open Redirect Vulnerability (FG-IR-17-014)

Fortinet FortiManager is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Elastic Stack 5.4.3 Security update

Kibana X-Pack Security user credentials disclosure ESA-2017-11 In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the...