7576 matches found
PYSEC-2021-117
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output...
CVE-2021-23423
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output...
PT-2021-19955
Name of the Vulnerable Software and Affected Versions hbs affected versions not specified Description The hbs package, an Express view engine wrapper for Handlebars, may be vulnerable to a file disclosure issue depending on its usage. This occurs because hbs combines pure template data with engin...
CVE-2021-32822: Insertion of Sensitive Information into Externally-Accessible File or Directory
The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express rende...
CVE-2021-23423: Improper Limitation of a Pathname to a Restricted Directory
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output...
PT-2021-15511
Name of the Vulnerable Software and Affected Versions bikeshed versions prior to 3.0.0 Description The issue arises when processing an untrusted source file that contains include, include-code, or include-raw blocks. This can lead to the disclosure of arbitrary file contents in the HTML output...
Adobe Acrobat Classic 2020 Security Update (APSB21-51) - Windows
The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat DC Continuous Security Update (APSB21-51) - Windows
The host is missing an important security update according to Adobe August update. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Adobe Reader Classic 2020 Security Updates (APSB21-51) - Windows
The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-37178
A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...
CVE-2021-37178
A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...
CVE-2021-37178
A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...
CVE-2021-37178
A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...
CVE-2021-37178
Summary: CVE-2021-37178 affects Siemens Solid Edge SE2021 (all versions before SE2021MP7). It is an XML External Entity (XXE) vulnerability in the underlying XML parser that could cause disclosure of arbitrary files when processing a crafted XML file. Connected sources confirm affected product/ve...
CVE-2021-37178: Improper Restriction of XML External Entity Reference
A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file...
DELL EMC Data Protection Search log information leakage vulnerability
DELL EMC Data Protection Search is a scalable indexing and search appliance from Dell USA that integrates with Avamar and NetWorker. A log information disclosure vulnerability exists in Dell EMC Data Protection Search that stems from an information exposure vulnerability in a log file included in...
PT-2021-20606
Name of the Vulnerable Software and Affected Versions: WordPress Download Manager versions 3.1.24 and prior versions Description: The issue allows authenticated users with Contributor+ roles to obtain sensitive configuration file information. Additionally, Author+ users can perform XSS attacks by...
ObjectPlanet Opinio 7.13 / 7.14 XML Injection
Exploit Authors: Timothy Tan , Daniel Tan, Yu EnHui, Khor Yong Heng CVE: CVE-2020-26564 Exploit Title: ObjectPlanet Opinio version 7.13/7.14 allows XXE injection Vendor Homepage: https://www.objectplanet.com/opinio/ Software Link: https://www.objectplanet.com/opinio/ Exploit Authors: Timothy Tan ...
ObjectPlanet Opinio 7.13 / 7.14 XML Injection Vulnerability
Exploit Authors: Timothy Tan , Daniel Tan, Yu EnHui, Khor Yong Heng CVE: CVE-2020-26564 Exploit Title: ObjectPlanet Opinio version 7.13/7.14 allows XXE injection Vendor Homepage: https://www.objectplanet.com/opinio/ Software Link: https://www.objectplanet.com/opinio/ Exploit Authors: Timothy Tan ...