2572 matches found
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
CVE-2022-31509 affects the repository iedadata/usap-dc-website (version ≤ 1.0.1). The vulnerability is an absolute path traversal created by unsafe use of Flask’s send_file function, enabling traversal of server filesystem paths. The issue is documented across multiple sources (NVD, Red Hat, OSV,...
usap-dc-website 路径遍历漏洞
usap-dc-website is an open source repository for usap-dc website by Interdisciplinary Earth Data Alliance. It includes a javascript client application and a python/flask server. A path traversal vulnerability exists in usap-dc-website version 1.0.1, which stems from insecure use of the Flask...
CVE-2022-31509: Improper Limitation of a Pathname to a Restricted Directory
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
dc-bandits.de Cross Site Scripting vulnerability OBB-2685183
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Secheron SEPCOS Control and Protection Relay Elevation of Privilege Vulnerability
Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.An elevation of privilege vulnerability exists in the Secheron SEPCOS...
Secheron SEPCOS Control and Protection Relay Weak Password Vulnerability
Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay has a weak password...
MAL-2022-3118 Malicious code in fossa-dc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc48c6e613a443d6df8f223800c5ddb65bbd98d2a4a436ae5dadc30701be04b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fossa-dc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc48c6e613a443d6df8f223800c5ddb65bbd98d2a4a436ae5dadc30701be04b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MINMAX SQL Injection Vulnerability
MINMAX is a high power density 10W DC-DC converter for space-critical applications from China-based MINMAX. MINMAX is vulnerable to SQL injection, which can be exploited by attackers to cause a sql injection issue through manipulation of the id parameter in /newsDia.php...
CVE-2022-1669 Circutor COMPACT DC-S BASIC
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...
Circutor COMPACT DC-S BASIC 安全漏洞
Circutor COMPACT DC-S BASIC is a compact DC concentrator from Circutor Spain. A security vulnerability exists in Circutor COMPACT DC-S BASIC CIRCDCv1.2.17 version, which originates from a buffer overflow in the firewall function of the provisioning management portal. An attacker could send a long...
samba security, bug fix, and enhancement update
4.15.5-5 - resolves: rhbz2064325 - Fix 'create krb5 conf = yes' when a KDC has a single IP address. 4.15.5-4 - resolves: rhbz2057503 - Fix winbind kerberos ticket refresh 4.15.5-3 - related: rhbz1979959 - Fix typo in testparm output 4.15.5-2 - resolves: rhbz1979959 - Improve idmap autorid sanity...
CVE-2021-33078
Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-33078
Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-33074
Protection mechanism failure in firmware for some IntelR SSD, IntelR SSD DC and IntelR OptaneTM SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2021-33075
Race condition in firmware for some IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...