OPENSUSE-SU-2021:0176-1 Security update for python-autobahn

This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for python-autobahn (moderate)

openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0176-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This...

openSUSE Security Update : python3 (openSUSE-2020-2333)

This update for python3 fixes the following issues : - Fixed CVE-2020-27619 bsc1178009, where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. - Change setuptools and pip version numbers according to new wheels - Handful of changes to make python36 compatible with SLE15 an...

openSUSE Security Update : python-autobahn (openSUSE-2021-152)

This update for python-autobahn fixes the following issue : - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

OPENSUSE-SU-2021:0152-1 Security update for python-autobahn

This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for python-autobahn (moderate)

openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0152-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

OPENSUSE-SU-2021:0132-1 Security update for python-autobahn

This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570...

Security update for python-autobahn (moderate)

openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0132-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

python-urllib3: CRLF injection via HTTP request method

A flaw was found in python-urllib3. The HTTPConnection.request does not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation of the request by injecting additional HTTP headers. The highest threat from this vulnerability is to confidentiality and integrit...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

Cross site scripting

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

CVE-2020-5019

CVE-2020-5019 affects IBM Spectrum Protect Plus 10.1.0–10.1.6. The vulnerability is an HTTP header injection caused by improper validation of the Host header, which an attacker can exploit by sending a crafted HTTP request to inject the Host header and trigger attacks such as cross-site scripting...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

IBM Spectrum Protect和IBM Spectrum Protect Plus 注入漏洞

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. An HTTP header injection vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.6. The vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-5017, CVE-2020-5018, CVE-2020-5019, CVE-2020-5020, CVE-2020-5021, CVE-2020-5022)

Summary IBM Spectrum Protect Plus is vulnerable to exposure of sensitive data, clickjacking, HTTP header injection, failure to invalidate sessions, and unauthorized access to information. Vulnerability Details CVEID: CVE-2020-5018 DESCRIPTION: IBM Spectrum Protect Plus may include sensitive...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing

Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...

Sentrifugo 跨站脚本漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A cross-site scripting vulnerability exists in Sentrifugo version 3.2, which originates from inserting an x-forward-f...

CVE-2020-35678

A flaw was found in python-autobahn, where it allows redirect header injection. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...