236 matches found
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
Directory traversal
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js...
CVE-2021-26504
CVE-2021-26504 affects Foddy’s node-red-contrib-huemagic (v3.0.0). The vulnerability is a directory traversal in the hue-magic.js res.sendFile API, enabling remote attackers to read sensitive information. CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, and no pr...
GHSA-RXFP-8JMR-XC95 Cloudera HUE Account Enumeration
Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete...
Cloudera HUE Account Enumeration
Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete...
Cloudera Hue Cross-Site Scripting Vulnerability
Cloudera Hue is a mature open source SQL helper for querying any database and data warehouse.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via the type parameter...
Cloudera Hue Cross-Site Scripting Vulnerability (CNVD-2021-85875)
Cloudera Hue is a full-fledged open source SQL helper for querying any database and data repository.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker could use the vulnerability to obtain administrator cookies, etc...
CVE-2021-32481
Cloudera Hue 4.6.0 allows XSS via the type parameter...
CVE-2021-29994
Cloudera Hue 4.6.0 allows XSS...
CVE-2021-32481
Cloudera Hue 4.6.0 allows XSS via the type parameter...
CVE-2021-29994
Cloudera Hue 4.6.0 allows XSS...
CVE-2021-32481
Cloudera Hue 4.6.0 allows XSS via the type parameter...
Cross site scripting
Cloudera Hue 4.6.0 allows XSS...
Cross site scripting
Cloudera Hue 4.6.0 allows XSS via the type parameter...
CVE-2021-29994
Cloudera Hue 4.6.0 allows XSS...
CVE-2021-29994
CVE-2021-29994 affects Cloudera Hue 4.6.0 with a cross-site scripting (XSS) vulnerability. The connected documents consistently describe an XSS issue in Hue 4.6.0, with impact noted as potential exposure of administrator cookies. No technical specifics (root cause, affected components, exploit ve...
