964 matches found
GHSA-XWHJ-PQCG-8RCR CakePHP vulnerable to Cross-site Scripting in some development error pages
CakePHP 3.4 prior to 3.4.14, 3.5 prior to 3.5.17, and 3.6 prior to 3.6.4 contains a cross-site-scripting XSS vulnerability in the development only missing route and duplicate named route error pages...
GSD-2022-1007907 hugetlbfs: don't delete error page from pagecache
hugetlbfs: don't delete error page from pagecache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...
GSD-2022-1007750 hugetlbfs: don't delete error page from pagecache
hugetlbfs: don't delete error page from pagecache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
CVE-2022-3704
A self cross-site scripting vulnerability was found in Ruby on Rails. This issue occurs when requesting a page that does not have a matching routing, allowing a user to create a script injection within the routing error page...
GHSA-9CHR-4FJH-5RGW Cross-site Scripting in actionpack
actionpack from the Ruby on Rails project is vulnerable to Cross-site Scripting in the Route Error Page. This issue has been patched with this commit. This vulnerability is disputed by the Rails security team. It requires that the developer is tricked into copy pasting a malicious...
Cross-site Scripting in actionpack
actionpack from the Ruby on Rails project is vulnerable to Cross-site Scripting in the Route Error Page. This issue has been patched with this commit. This vulnerability is disputed by the Rails security team. It requires that the developer is tricked into copy pasting a malicious...
ALPINE-CVE-2022-40468
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
Heap overflow
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
CVE-2022-40468
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
CVE-2022-40468
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
CVE-2022-40468
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
CVE-2022-40468
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function...
CVE-2022-40468
CVE-2022-40468 affects tinyproxy. The issue is a potential leak of left-over heap data when using custom error page templates with non-standard variables, caused by uninitialized buffers in process_request() and related header handling. Multiple advisories confirm risk across distros, including D...
CVE-2022-3175
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
Design/Logic Flaw
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175 Missing Custom Error Page in ikus060/rdiffweb
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
CVE-2022-3175 affects the rdiffweb project in the GitHub repository ikus060/rdiffweb prior to version 2.4.2. The vulnerability is a missing custom error page which leads to leakage of error information. The issue is resolved in version 2.4.2. Mitigation: upgrade to 2.4.2 or later. Exploitation de...