34 matches found
Electron 安全漏洞
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium can use HTML, CSS to achieve cross-platform desktop application writing . A security vulnerability exists in Electron versions 20.x before...
The vulnerability of the command-line processor of the NGINX Ingress Controller, which allows a hacker to disclose protected information.
The vulnerability of the command-line processor of the NGINX Ingress Controller monitoring and application management platform is related to insufficient checks for granting permissions to critical resources. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...
MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...
jetty: Ambiguous paths can access WEB-INF
In Jetty the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can use this vulnerability to reveal sensitive information regarding the implementation of a web application...
PT-2021-22211 · Best Practical +2 · Request Tracker +2
Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.2 through 4.2.16 Best Practical Request Tracker RT versions 4.4 through 4.4.4 Best Practical Request Tracker RT versions 5.0 through 5.0.1 Description: The issue allows sensitive information...
sumitomoriko.co.jp Cross Site Scripting vulnerability OBB-1475885
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sweroom.com Cross Site Scripting vulnerability OBB-1205428
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Office Elevation of Privilege Vulnerability (CNVD-2018-12577)
Microsoft Office Online Server 2016 and Office Web Apps Server 2013 SP1 are both products of Microsoft Corporation USA.Microsoft Office Online Server 2016 is a Web-based office software suite. Office Web Apps Server 2013 SP1 is an Office Server product that provides browser-based file viewing and...
qqinvest.uz XSS vulnerability
Open Bug Bounty ID: OBB-626120 Description| Value ---|--- Affected Website:| qqinvest.uz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information
Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0...
CVE-2016-7834
SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550,...
CVE-2006-0863
InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message...
