3268 matches found
CVE-2019-19326
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return...
CVE-2019-19326
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return...
Design/Logic Flaw
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return...
Heybbs micro-community has an overstepping vulnerability
Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs Micro Community has an override vulnerability. An attacker can use this vulnerability to delete all users' message notifications, including the administrator...
Node disk DOS by writing to container /etc/hosts
CVSS Rating: Medium 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/CR:H/IR:H/AR:M The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it...
CVE-2020-8184
A reliance on cookies without validation/integrity check security vulnerability exists in rack 2.2.3, rack 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix...
curl: curl overwrite local file with -J
Summary: curl supports the Content-disposition header, including the filename= option. By design, curl does not allow server-provided local file override by verifying that the filename= argument does not exist before opening it. However, the implementation contains 2 minor logical bugs that allow...
GHSA-R5JW-62XG-J433 Cross-Site Scripting in Kaminari
Impact In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. Releases The 1.2.1 gem including the patch has already been released. All past released versions are affected by this...
CVE-2018-20225
An issue was discovered in pip all versions because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not...
UBUNTU-CVE-2020-11054
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow colors.statusbar.url.warn.fg. However, when the affected website was subsequently loaded again, the UR...
sumocoin Number Error Vulnerability
sumocoin SUMO is an ethereum-based digital currency. an integer overflow vulnerability exists in the 'mintToken' function in SUMO's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Foxit PDF Reader U3D Plugin's ci*** module suffers from an override read vulnerability
Foxit PDF Reader is an e-book reader. The ci module of the Foxit PDF Reader U3D plug-in has an override read vulnerability that can be exploited by an attacker to execute code in the current application context by constructing a special PDF file...
Unspecified Vulnerability in Mozilla Firefox ESR (CNVD-2020-26231)
Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. An unspecified vulnerability exists in Mozilla Firefox ESR. An attacker can exploit the vulnerability by overriding a user's preferences with malicious preference values to...
DEBIAN-CVE-2019-14868
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those...
Internal Property Tampering
Overview valib is an A standalone javascript library tailored for validation. Affected versions of this package are vulnerable to Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function...
DEBIAN-CVE-2014-5278
A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...
CVE-2014-5278
A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...
GHSA-8VP7-J5CJ-VVM2 Ability to expose data in Sylius by using an unintended serialisation group
Impact ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's...