Information disclosure

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

CVE-2010-3782

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

CVE-2010-3782

CVE-2010-3782 affects obs-server prior to 1.7.7, where a bug in the REST API implementation allows login by 'unconfirmed' accounts. This exposes unauthorized access through the authentication flow. The practical impact is limited to systems running affected obs-server versions and relying on unco...

CVE-2010-3782

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

Cisco Data Center Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

Cisco Data Center Network Manager Command Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system OS. For more information about...

Exploit for SQL Injection in Redmine

CVE-2019-18890 CVE-2019-18890 POC Proof of Concept REDMINE...

CVE-2019-20329: Origin Validation Error

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...

CVE-2010-3782: Incorrect Authorization

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

PT-2020-10387

Name of the Vulnerable Software and Affected Versions OpenLambda affected versions not specified Description The issue allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2020-1369

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue concerns multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM, allowing an authenticated, remote...

PT-2020-1365

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM versions prior to the fixed version Description The issue exists due to incorrect restriction of a directory path name with limited access in the Application Framework component of Cisco Data Center Netwo...

PT-2020-1368

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description The issue concerns multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager. These...

PT-2020-1366

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue concerns multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager DCNM...

PT-2020-1362

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM, which could allow an authenticate...

PT-2020-7075

Name of the Vulnerable Software and Affected Versions obs-server versions prior to 1.7.7 Description The issue allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation. Recommendations For versions prior to 1.7.7, update to version 1.7.7 or later to resolve the issue. A...

CVE-2013-0196

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...

Cross site request forgery (csrf)

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...

CVE-2013-0196

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...

CVE-2013-0196

OpenShift Enterprise 1.2 is affected by a CSRF vulnerability where the web console uses Basic authentication and the REST API lacks CSRF protection, potentially exposing credentials and Authorization headers when browsers request the API. Affected component: OpenShift Enterprise 1.2 web console/R...