Fedora 27 : 1:rubygem-sinatra (2018-0b17e1e529)

Fix XSS in the 400 Bad Request page CVE-2018-11627, rhbz1585218. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

GHSA-MQ35-WQVF-R23C Sinatra Cross-site Scripting vulnerability

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

Sinatra Cross-Site Scripting Vulnerability

Sinatra is a Ruby-based domain-specific language for creating web applications. A cross-site scripting vulnerability exists in versions of Sinatra prior to 2.0.2. A remote attack can exploit this vulnerability to inject arbitrary web script or HTML via a 400 Bad Request page...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

Cross site request forgery (csrf)

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

UBUNTU-CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

CVE-2018-11627 affects the Sinatra Ruby gem (pre-2.0.2) with an XSS in the 400 Bad Request page triggered by a params parser exception. Fedora/RH advisories (e.g., RHSA-2019:0212, RHSA-2019:0315) document fixes and package updates for rubygem-sinatra across affected Fedora/RHEL releases; OpenVAS/...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627: Improper Neutralization of Input During Web Page Generation

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

PT-2018-10712

Name of the Vulnerable Software and Affected Versions Sinatra versions prior to 2.0.2 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs on the 400 Bad Request page when there is a params parser exception. Recommendations For versions prior to 2.0.2, update to versi...

XSS via the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CentOS Update for httpd CESA-2017:1721 centos6

Check the version of httpd SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882751";...

Moderate: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Director Error "Cannot retrieve data. Data source unresponsive or reported an error".

The following error is seen in the event viewer of the Director server: Log Name: Application Source: Citrix Director Service Date: 1/20/2017 11:05:33 AM Event ID: 5 Task Category: None Level: Error Keywords: Classic User: N/A Computer: CtxDirector.RepLab.Local Description: The description for...

Uber: Disclosure of ways to the site root

Hello. Go to this address and you see error with addresses https://trip.uber.com/1% Request GET /1% HTTP/1.1 Host: trip.uber.com Connection: keep-alive Cache-Control: max-age=0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 User-Agent: Mozilla/5.0 Windows NT 6.1;...