CVE-2019-1010084

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to ensureauth wrapper result in authentication-checking not being applied to al routes...

CVE-2019-1010084

CVE-2019-1010084 affects Dancer::Plugin::SimpleCRUD

CVE-2019-1010084

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to ensureauth wrapper result in authentication-checking not being applied to al routes...

PT-2019-11461

Name of the Vulnerable Software and Affected Versions: Dancer::Plugin::SimpleCRUD versions 1.14 and earlier Description: The issue is related to Incorrect Access Control, which may lead to unauthorized access to data. This occurs due to incorrect calls to the ensure auth wrapper, resulting in...

CVE-2019-1010084: Incorrect Authorization

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to ensureauth wrapper result in authentication-checking not being applied to al routes...

CVE-2018-7652

CVE-2018-7652 affects Zonemaster Web GUI, specifically lib/Zonemaster/GUI/Dancer/Export.pm, with a cross-site scripting (XSS) vulnerability present in versions before 1.0.11. The issue is triggered by unsanitized data in the Export.pm component, enabling injection of arbitrary script or HTML. Pub...

CVE-2018-7652

lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...

PT-2018-18186

Name of the Vulnerable Software and Affected Versions Zonemaster Web GUI versions prior to 1.0.11 Description The issue is related to an XSS problem in the lib/Zonemaster/GUI/Dancer/Export.pm file. Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issu...

Dude Dancer (Rhythm Game) - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dude Dancer Rhythm Game published at the 'play' market has multiple vulnerabilities...

Finger Dancer : Stap Mania - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finger Dancer : Stap Mania published at the 'play' market has multiple vulnerabilities...

Ballet Dancer: Show Time Salon - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ballet Dancer: Show Time Salon published at the 'play' market has multiple vulnerabilities...

Ballet Dancer - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ballet Dancer published at the 'play' market has multiple vulnerabilities...

FreeBSD : p5-Dancer -- possible to abuse session cookie values (968d1e74-1740-11e5-a643-40a8f0757fb4)

Russell Jenkins reports : It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or Dancer2::Session::YAML would attempt to read/write from any file on the filesystem with the same extension the file-based store uses, such as '.yml' for the...

p5-Dancer -- possible to abuse session cookie values

Russell Jenkins reports: It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or Dancer2::Session::YAML would attempt to read/write from any file on the filesystem with the same extension the file-based store uses, such as '.yml' for the...

CVE-2012-5572

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...

CVE-2012-5572

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...

DEBIAN-CVE-2012-5572

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...

Crlf injection

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...

CVE-2012-5572

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...

UBUNTU-CVE-2012-5572

CRLF injection vulnerability in the cookie method lib/Dancer/Cookie.pm in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526...