New Web CMS suffers from an override access vulnerability

Linyi Xinnet Network Technology Co., Ltd. is a network application service provider for the majority of government and enterprises and institutions to provide enterprise website construction, website optimization, network promotion, Linyi SEO, mobile station, micro letter marketing, domain name...

HPE Integrated Lights Out (iLO) Override Vulnerability

HPE Integrated Lights-Out 4 iLO 4 and Integrated Lights-Out 5 iLO 5 are both embedded server management technologies from Hewlett Packard Enterprise HPE that use an integrated remote management port to monitor and maintain the server operation, remote control of the server, and more through an...

method-override denial of service vulnerability

method-override is a module that enables the use of HTTP Verbs such as PUT, DELETE, etc. in the client. A security vulnerability exists in method-override. An attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

CVE-2018-1090

In Pulp before version 2.16.2, secrets are passed into overrideconfig when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets...

PT-2018-11092 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: com.getdropbox.Dropbox app version 100.2 for iOS Description: An issue in the LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the...

CVE-2018-1103

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

Input validation

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

CVE-2018-1103

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

CVE-2018-1103

An improper validation of user input flaw was found in the source-to-image component of Openshift. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

hapi node module security restriction vulnerability

The hapi node module is a server framework for Node.js. The framework supports input validation, caching, authentication and more. A security vulnerability exists in hapi node module versions prior to 11.1.4. An attacker can exploit the vulnerability to override a higher security restriction...

Regular Expression Denial Of Service (ReDoS)

method-override is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability exists when parsing malicious X-HTTP-Method-Override header...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...

CVE-2017-16136

CVE-2017-16136 affects the Node.js module method-override used with the Express.js framework. The issue is a regular expression denial of service (ReDoS) triggered when untrusted input is parsed via the X-HTTP-Method-Override header. In the provided documents, exploitation details are not describ...

CVE-2017-16136

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed...

Yestv camera has an override access vulnerability

Yestv yestv camera is wireless network wifi smart monitor. The yestv camera is vulnerable to an override access vulnerability. With the obtained address and username password, an attacker can exploit the vulnerability to obtain video information from the camera...

[SECURITY] [DSA 4216-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4216-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2018 https://www.debian.org/security/faq -...

HadSky Light Forum system suffers from an override access vulnerability

HadSky Light Forum System is a free and open forum system for individual users. A vulnerability exists in the HadSky Light Forum System that can be exploited to gain unauthorized access to administrator sensitive information and all user sensitive information. An attacker can exploit the...

CVE-2017-2612

CVE-2017-2612 affects Jenkins platforms prior to 2.44 and prior to 2.32.2. The issue allows low-privilege users to override JDK download credentials, which can lead to builds failing to download a JDK in the future. Root cause is improper permission/credential handling for JDK download. The descr...

Receiver | keyboard language set on VDA is over ridden by the one set on the endpoint

User from non domain joined endpoint logs on the VDA Language set on the VDA is overridden by the one set on endpoint machine Receiver. We want to ensure that the keyboard language set on the VDA is the one user gets inside the session. In other words, keyboard language set on the endpoint Receiv...

CVE-2018-1000175

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...