PT-2020-8024

Name of the Vulnerable Software and Affected Versions: REST/JSON project versions 7.x-1.x for Drupal Description: The issue allows user registration bypass. This project is not covered by Drupal's security advisory policy. Recommendations: For versions 7.x-1.x, consider disabling user registratio...

PT-2020-8021

Name of the Vulnerable Software and Affected Versions: REST/JSON project for Drupal version 7.x-1.x Description: The issue allows comment access bypass. This project is not covered by Drupal's security advisory policy. Recommendations: For version 7.x-1.x, update to a version that includes the fi...

PT-2020-8020

Name of the Vulnerable Software and Affected Versions: REST/JSON project for Drupal versions 7.x-1.x Description: The issue allows node access bypass. This project is not covered by Drupal's security advisory policy. Recommendations: For versions 7.x-1.x, update to a version that includes the fix...

PT-2019-14513

Name of the Vulnerable Software and Affected Versions Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x Description The issue allows directory traversal via a "rest/json/configdb/download/" URI. Recommendations For versions prior to 8.1.7.x, update to version 8.1.7.x or later to resolve th...

PT-2019-14509

Name of the Vulnerable Software and Affected Versions Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x Description The issue allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the "rest/json/banners" URI...

CVE-2019-16104: Improper Neutralization of Input During Web Page Generation

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...

PT-2019-14512

Name of the Vulnerable Software and Affected Versions Silver Peak EdgeConnect SD-WAN versions prior to 8.1.7.x Description The issue is related to a reflected XSS attack. It can be exploited via the "rest/json/configdb/download/" API endpoint. Recommendations For versions prior to 8.1.7.x, update...

CVE-2019-16105: Improper Limitation of a Pathname to a Restricted Directory

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...

REST JSON - Multiple Vulnerabilities - Highly Critical - Unsupported - SA-CONTRIB-2016-033

This module enables you to expose content, users and comments via a JSON API. The module contains multiple vulnerabilities including Node access bypass Comment access bypass User enumeration Field access bypass User registration bypass Blocked user login Session name guessing Session enumeration...

Silver Peak VX Command Injection / Shell Upload / File Read

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Silver Peak VXOA Multiple Vulnerabilities Affected versions: Silver Peak VX 6.2.11 PDF:...