Cross site request forgery (csrf)

Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use HttpAuthMiddleware i.e. the httpuser and httppass spider attributes for Splash authentication will have any non-Splash request expose your credentials to the request target. This includ...

CVE-2021-41124 Splash authentication credentials potentially leaked to target websites in scrapy-splash

Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use HttpAuthMiddleware i.e. the httpuser and httppass spider attributes for Splash authentication will have any non-Splash request expose your credentials to the request target. This includ...

CVE-2021-41124

The CVE affects the scrapy-splash library used with Scrapy. When HttpAuthMiddleware (http_user/http_pass) is used for Splash authentication, non-Splash requests can leak credentials to the target, including robots.txt requests if ROBOTSTXT_OBEY is True. Remediation per the reports is to upgrade t...

CVE-2021-24587

The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...

CVE-2021-24587

The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...

CVE-2021-24587

CVE-2021-24587 affects the Splash Header WordPress plugin prior to version 1.20.8. The underlying issue is improper sanitisation/escaping of certain plugin settings when they are output in the admin dashboard, enabling authenticated stored Cross-Site Scripting (XSS). The documented impact is an a...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. WordPress Plugin A cross-site scripting vulnerability exists that stems from the Splash Header plugin prior to version 1.20.8 not clearing and escaping some of its settings when outputting in the admin dashboard, which leads to...

WordPress Splash Header plugin <= 1.20.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by xiahao in WordPress Splash Header plugin versions = 1.20.7. Solution Update the WordPress Splash Header plugin to the latest available version at least 1.20.8...

CVE-2021-1897

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1898

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Buffer overflow

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1897

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1898

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1897

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1897

CVE-2021-1897 is a Qualcomm bootloader vulnerability in Snapdragon devices involving a buffer over-read during splash image loading due to missing boundary checks. Affected component: Bootloader. Evidence from the Android Pixel bulletin lists CVE-2021-1897 as Moderate severity with a physical att...

Qualcomm 芯片缓冲区错误漏洞

The Qualcomm MDM9206 and APQ8053 are both central processing unit CPU products from Qualcomm Incorporated. A buffer error vulnerability exists in the Qualcomm APQ8009, which stems from a lack of boundary check validation when loading a splash image in the device's Boot subsystem. An attacker with...

[SECURITY] Fedora 34 Update: plymouth-kcm-5.21.3-1.fc34

This is a System Settings configuration module for configuring the plymouth splash screen...

Fedora: Security Advisory for plymouth-kcm (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the Splash::blitTransparent function in the Poppler PDF rendering library allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Splash::blitTransparent function splash/Splash.cc in the Poppler PDF rendering library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause servi...

Splash suffers from a denial of service vulnerability (CNVD-2021-17449)

Splash is a JavaScript rendering service, a lightweight browser with an HTTP API, and it interfaces with the Twisted and QT libraries in Python. A denial of service vulnerability exists in Splash. An attacker can exploit this vulnerability to cause the program to crash...