17077 matches found
Design/Logic Flaw
Das Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution of code within a ZIP archive...
CVE-2019-7873
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule...
Design/Logic Flaw
routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule...
CVE-2019-7873
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule...
Design/Logic Flaw
cPanel before 64.0.21 allows demo accounts to redirect web traffic SEC-245...
Design/Logic Flaw
In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...
Design/Logic Flaw
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats SEC-334...
Design/Logic Flaw
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
Design/Logic Flaw
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
From E-Commerce to Enterprise Employee: How I Overcame my Fears and Doubts
By Efrat Silberhaft One year ago, I was working as the sole designer in a small e-commerce startup. When the company shut down, I had to start looking for a new job. I decided to leave the startup world. What I didn't know is that my next step would turn out to be in a different field —...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
Design/Logic Flaw
webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task SEC-352...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test SEC-353...
Design/Logic Flaw
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
Design/Logic Flaw
cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...