464 matches found
Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the exposeconfig option is set to non-sensitive-only. The exposeconfig option is False by default. It is recommended to upgrade to a...
Deserialization Of Untrusted Data
Apache Airflow Spark Provider is vulnerable to deserialization of untrusted data. The vulnerability occurs when an authorized Airflow user configures Spark hooks on an Airflow node pointing it to a malicious Spark server in an Airflow deployment causing arbitrary code to be run on that Airflow...
CVE-2023-34040
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
CVE-2023-34040 Java Deserialization vulnerability in Spring-Kafka When Improperly Configured
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
PT-2023-22177 · WordPress · Infinitewp Client
Name of the Vulnerable Software and Affected Versions: InfiniteWP Client plugin for WordPress versions up to, and including, 1.11.1 Description: The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure via the admin notice function. This can allow authenticated...
SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)
Overview SEIKO EPSON printer Web Config contains a denial-of-service DoS vulnerability due to improper input validation CWE-20. SEIKO EPSON CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and SEIKO EPSON CORPORATION coordinated under the...
CVE-2023-30560
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
Sanitize 跨站脚本漏洞
Sanitize is an HTML and CSS cleaner by Ryan Grove, an individual developer in the United States, which supports removing HTML and CSS from strings, among other things. A cross-site scripting vulnerability exists in Sanitize versions prior to 3.0.0 to 6.0.2, which stems from the presence of a...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
CVE-2023-33264 affects Hazelcast through 5.0.4, 5.1–5.1.6, and 5.2–5.2.3, where configuration routines do not mask passwords in the member configuration, allowing Hazelcast Management Center users to view some secrets. Multiple connected sources confirm impact on Hazelcast and variants of product...
CVE-2023-32983
Jenkins Ansible Plugin 204.v8191fd551ebf and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them...
The vulnerability of the configuration of NETGEAR RAX30 microprogramming software allows a hacker to disclose protected information and compromise the system.
The vulnerability of NETGEAR RAX30 router microprogramming software’s configuration lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose protected data and compromise the system...
CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
GHSA-J2WH-WRV3-4X4G Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Summary Missing check vulnerability in the static file handler allows any client to access the files in the server's file system Details When staticFiles is set in the serve settings in the configuration file, the following handler doesn't check if absolutePath is still under the directory provid...
SUSE CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
The vulnerability of the configuration of web applications using microprogramming software for Moxa SDS-3008 Ethernet switches allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the configuration of web applications developed with Microprogramming Software for Moxa SDS-3008 Ethernet switches lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informatio...
CVE-2022-4428
supporturi parameter in the WARP client local settings file mdm.xml lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send feedback" option. An attacker with access to the local file system could use a...
CVE-2022-4858
CVE-2022-4858 affects M-Files Server versions prior to 22.10.11846.0. The vulnerability allows insertion of sensitive information into log files, which could enable extraction of sensitive tokens from logs when certain configurations are set. The provided documents indicate remediation by upgradi...
Web Invoice <= 2.1.3 - Authenticated SQLi
The plugin does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as subscriber could exploit this as well PoC...
