Elecom File Manager For Android Path Traversal Vulnerability

Elecom File Manager For Android is an application from Elecom Japan for managing files on Android devices. A security vulnerability exists in ELECOM File Manager: All versions, which allows remote attackers to perform directory traversal attacks...

Gin-Gonic Gin Environmental Vulnerabilities

Gin-Gonic Gin is a Go-based framework for rapidly building web applications from the Gin-Gonic team. github.com/gin-gonic/gin A security vulnerability exists in all versions, which stems from the ability to spoof a client's IP by setting the X-Forwarded-For header...

CVE-2020-28477

This affects all versions of package immer...

Immer Security Breach

Immer is a Javascript-based state management library for the Immer community. A security vulnerability exists in all versions of Immer. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-3113

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, a...

CVE-2021-3113

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, a...

CVE-2020-27265

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are...

GHSA-WW4J-C2RQ-47Q8 Command injection in ts-process-promises

This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js...

PT-2021-11264

Name of the Vulnerable Software and Affected Versions: REDCap version 10.3.4 Description: The issue concerns a SQL injection vulnerability in the ToDoList function via the sort parameter. This vulnerability arises because the application incorporates user-submitted information into database queri...

What’s New in InsightAppSec and tCell: Q4 2020 in Review

It’s crazy to believe 2020 has come to an end, and we’re sure we’re not alone in our excitement for 2021! Without a doubt, 2020 has presented some challenges for us all in the security world, as many companies quickly adopted a work-from-home model and pivoted from an in-store experience quickly ...

CVE-2020-7794

This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function installrequestedModule...

Denial of Service Vulnerability in LoveFast Router

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Denial of Service Vulnerability in LoveFast Router (CNVD-2021-03424)

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Buns Command Injection Vulnerability

Buns is a Javascript-based application for executing shell commands with cached output by the individual developer of Buns. Buns all versions suffers from a command injection vulnerability in lib/index.js in the exported function installrequestdmodule at line 678...

Denial of Service Vulnerability in AIFUL Router iK-Q80

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. Denial of service vulnerability exists ...

DEBIAN-CVE-2020-35111

When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

Cross site scripting

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

The CVE-2020-35946 issue affects the WordPress plugin All in One SEO Pack up to version 3.6.2. It arises from unsanitized input in the SEO Description and SEO Title fields, enabling stored XSS from a Contributor and affecting post pages in the admin area. The documented impact is stored XSS; expl...