Alibaba Cloud Object Storage Service 安全漏洞

Alibaba Cloud Object Storage Service Alibaba Cloud OSS is a secure, cost-effective object storage service from China's Alibaba Cloud. A security vulnerability exists in Alibaba Cloud Object Storage Service versions prior to 0.8.1, which stems from an inadvertent disclosure of incoming secret...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is a WordPress application plugin. WordPress Sync QCloud COS plugin version prior to 2.0.1 contains a cross-site scripting vulnerability that stems from the plugin's failure to escape so...

Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK Java (February 2020 Bulletin)

Summary Security vulnerability affects IBM Cloud Object Storage SDK Java. The vulnerability has been addressed in the latest SDK 2.6.1 release. Vulnerability Details CVEID: CVE-2019-20330 DESCRIPTION: A lacking of certain net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact...

Security Bulletin: Security vulnerabilities affect IBM Cloud Object Storage SDK Java (November 2019 Bulletin)

Summary Security vulnerabilities affect IBM Cloud Object Storage SDK Java. These vulnerabilities have been addressed in the latest SDK 2.5.5 release. Vulnerability Details CVEID: CVE-2019-16335 DESCRIPTION: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It ...

Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK Python (January 2020 Bulletin)

Summary Security vulnerability affects IBM Cloud Object Storage SDK Python. The vulnerability has been addressed in the latest SDK 2.6.0 release. Vulnerability Details CVE-ID: CVE-2019-18874 Description: psutil aka python-psutil through 5.6.5 can have a double free. This occurs because of refcoun...

Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK NodeJS (Mar 2019)

Summary Security vulnerability affects IBM Cloud Object Storage SDK NodeJS. This vulnerability has been addressed in the latest SDK NodeJS release. Vulnerability Details CVE-ID: CVE-2018-16487 Description: Node.js lodash module is vulnerable to a denial of service, caused by a prototype pollution...

Security Bulletin: Vulnerability affects IBM Cloud Object Storage SDK Java (June 2019)

Summary Vulnerability affects IBM Cloud Object Storage SDK Java. It has been addressed in the latest SDK Java release. Vulnerability Details CVE-ID: CVE-2019-12086 Description: FasterXML jackson-databind could allow a remote attacker to obtain sensitive information, caused by a Polymorphic Typing...

Security Bulletin: Multiple vulnerabilities affect IBM Cloud Object Storage SDK Java (Feb 2019, updated)

Summary Multiple vulnerabilities affect IBM Cloud Object Storage SDK Java. These vulnerabilities have been addressed in the latest SDK Java releases. Vulnerability Details CVE-ID: CVE-2018-19362 Description: An unspecified error with failure to block the jboss-common-core class from polymorphic...

Xiaoming probe test Ali cloud OSS credentials have information leakage vulnerability

Xiaoming tan exam app is a learning mobile app application. Xiaoming Tangkao Ali Cloud OSS credentials have an information leakage vulnerability. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the mobile app. An...