GLSA-202409-04 : calibre: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-04 calibre: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in calibre. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Elastic Elasticsearch Privilege Escalation Vulnerability (ESA-2022-02)

Elastic Elasticsearch is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Enterprise Search 7.16.0 Security Update

Enterprise Search Information Disclosure issue ESA-2021-28 An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the...

Apache Wicket Information Disclosure Vulnerability (CNVD-2020-48974)

Apache Wicket is the United States Apache Apache Software Foundation , a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . An information disclosure vulnerability exists in Apache Wicket versions...

Apache Wicket Information Disclosure Vulnerability (Aug 2020)

Apache Wicket is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:wicket"...

CVE-2020-11976: Files or Directories Accessible to External Parties

By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML template that is usually removed during rendering. Affected are Apache Wicket versions 7.16.0, 8.8.0 and 9.0.0-M5...