4800 matches found
Security update for python-autobahn (moderate)
openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0152-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...
OPENSUSE-SU-2021:0132-1 Security update for python-autobahn
This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570...
Security update for python-autobahn (moderate)
openSUSE Security Update: Security update for python-autobahn Announcement ID: openSUSE-SU-2021:0132-1 Rating: moderate References: 1180570 Cross-References: CVE-2020-35678 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
python-urllib3: CRLF injection via HTTP request method
A flaw was found in python-urllib3. The HTTPConnection.request does not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation of the request by injecting additional HTTP headers. The highest threat from this vulnerability is to confidentiality and integrit...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
Cross site scripting
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
CVE-2020-5019
CVE-2020-5019 affects IBM Spectrum Protect Plus 10.1.0–10.1.6. The vulnerability is an HTTP header injection caused by improper validation of the Host header, which an attacker can exploit by sending a crafted HTTP request to inject the Host header and trigger attacks such as cross-site scripting...
IBM Spectrum Protect和IBM Spectrum Protect Plus 注入漏洞
IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. An HTTP header injection vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.6. The vulnerability...
Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-5017, CVE-2020-5018, CVE-2020-5019, CVE-2020-5020, CVE-2020-5021, CVE-2020-5022)
Summary IBM Spectrum Protect Plus is vulnerable to exposure of sensitive data, clickjacking, HTTP header injection, failure to invalidate sessions, and unauthorized access to information. Vulnerability Details CVEID: CVE-2020-5018 DESCRIPTION: IBM Spectrum Protect Plus may include sensitive...
CVE-2020-5019
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...
Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing
Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...
Sentrifugo 跨站脚本漏洞
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A cross-site scripting vulnerability exists in Sentrifugo version 3.2, which originates from inserting an x-forward-f...
CVE-2020-35678
A flaw was found in python-autobahn, where it allows redirect header injection. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
DEBIAN-CVE-2020-35678
Autobahn|Python before 20.12.3 allows redirect header injection...
CVE-2020-35678
Autobahn|Python before 20.12.3 allows redirect header injection...
CVE-2020-35678
Autobahn|Python before 20.12.3 allows redirect header injection...