88slot-ap (1.0.0), @andriyf/node-odata (>=0.7.15, <=0.7.1501) +469 more potentially affected by CVE-2017-16136 via method-override (>=1.0.2, <=2.3.9)

method-override NPM version =1.0.2, =0.7.15, =0.1.2-beta.1, =1.0.0, =0.13.7, =4.0.0-beta.6, =0.3.14, =0.27.6, =4.0.0, =4.2.34 and more Source cves: CVE-2017-16136 Source advisory: OSV:GHSA-QX2F-477C-35RQ...

GHSA-QX2F-477C-35RQ method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header

Affected versions of method-override are vulnerable to a regular expression denial of service vulnerability when untrusted user input is passed into the X-HTTP-Method-Override header. Recommendation Update to version 2.3.10 or later...

method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header

Affected versions of method-override are vulnerable to a regular expression denial of service vulnerability when untrusted user input is passed into the X-HTTP-Method-Override header. Recommendation Update to version 2.3.10 or later...

GitLab: Vulnerability in project import leads to arbitrary command execution

Summary: A filename regular expression could be bypassed and enable the attacker to create a symbolic link in Gitlab upload directory by importing a specially crafted Gitlab export. Further more, Gitlab is designed to not delete project upload directory currently. So, the attacker could delete th...

Moderate: Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 9 director Bug Fix Advisory

Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 9.0 director for RHEL 7. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud based on Red Hat OpenStack...

UBUNTU-CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

New Web CMS suffers from an override access vulnerability

Linyi Xinnet Network Technology Co., Ltd. is a network application service provider for the majority of government and enterprises and institutions to provide enterprise website construction, website optimization, network promotion, Linyi SEO, mobile station, micro letter marketing, domain name...

HPE Integrated Lights Out (iLO) Override Vulnerability

HPE Integrated Lights-Out 4 iLO 4 and Integrated Lights-Out 5 iLO 5 are both embedded server management technologies from Hewlett Packard Enterprise HPE that use an integrated remote management port to monitor and maintain the server operation, remote control of the server, and more through an...

method-override denial of service vulnerability

method-override is a module that enables the use of HTTP Verbs such as PUT, DELETE, etc. in the client. A security vulnerability exists in method-override. An attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

CVE-2018-1090

In Pulp before version 2.16.2, secrets are passed into overrideconfig when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets...

PT-2018-11092 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: com.getdropbox.Dropbox app version 100.2 for iOS Description: An issue in the LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the...

CVE-2018-1103

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

Input validation

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

CVE-2018-1103

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

CVE-2018-1103

An improper validation of user input flaw was found in the source-to-image component of Openshift. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

hapi node module security restriction vulnerability

The hapi node module is a server framework for Node.js. The framework supports input validation, caching, authentication and more. A security vulnerability exists in hapi node module versions prior to 11.1.4. An attacker can exploit the vulnerability to override a higher security restriction...

Regular Expression Denial Of Service (ReDoS)

method-override is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability exists when parsing malicious X-HTTP-Method-Override header...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...

CVE-2017-16136

CVE-2017-16136 affects the Node.js module method-override used with the Express.js framework. The issue is a regular expression denial of service (ReDoS) triggered when untrusted input is parsed via the X-HTTP-Method-Override header. In the provided documents, exploitation details are not describ...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...