55 matches found
HedgeDoc File Upload Vulnerability
Hedgedoc is a Javascript-based Markdown document real-time editing and sharing platform by the Hedgedoc team. A file upload vulnerability exists in versions prior to HedgeDoc 1.7.1, which can be exploited by an unauthenticated attacker to upload arbitrary files to the upload storage backend,...
Hedgedoc 代码问题漏洞
Hedgedoc is a Javascript-based Markdown document real-time editing and sharing platform by the Hedgedoc team. A file upload vulnerability exists in versions prior to HedgeDoc 1.7.1, which can be exploited by an unauthenticated attacker to upload arbitrary files to the upload storage backend,...
Visma Bug Bounty Program: [IDOR]Ability to Pause & Resume the Invoice of other users If GUID is known.
Insecure Direct Object Reference IDOR vulnerability is discovered via a certain endpoint and the application exposes a reference to an internal implementation object. It reveals the real identifier and format/pattern used of the element in the storage backend side...
CVE-2018-9999
In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the default LOCALUPLOADSDIR storage backend...
Debian DSA-3868-1 : openldap - security update
Karsten Heymann discovered that the OpenLDAP directory server can be crashed by performing a paged search with a page size of 0, resulting in denial of service. This vulnerability is limited to the MDB storage backend. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
PYSEC-2016-36
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name...
CVE-2015-8747
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name...
CVE-2015-8747
Radicale vulnerability CVE-2015-8747 affects the multifilesystem storage backend prior to 1.1, allowing remote attackers to read or write arbitrary files via a crafted component name. The root cause is the multifilesystem backend’s permissive handling of file paths, enabling access beyond intende...
CVE-2014-3559
The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete WAD is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and...
PT-2014-5395 · Red Hat · Red Hat Enterprise Virtualization
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization version 3.4 Description: The issue concerns the oVirt storage backend, which fails to wipe memory snapshots when a virtual machine VM is deleted, even if wipe-after-delete WAD is configured for the VM's disk...
ovirt-engine-backend: memory snapshots not wiped when deleting a VM with wipe-after-delete (WAD) enabled for its disks
It was found that the oVirt storage back end did not wipe memory snapshots when VMs were deleted, even if wipe-after-delete WAD was enabled for the VM's disks. A remote attacker with credentials to create a new VM could use this flaw to potentially access the contents of memory snapshots in an...
Fedora Update for graphite-web FEDORA-2013-15713
Check for the Version of graphite-web OpenVAS Vulnerability Test Fedora Update for graphite-web FEDORA-2013-15713 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18
Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...
riak-http-info NSE Script
Retrieves information such as node name and architecture from a Basho Riak distributed database using the HTTP protocol. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...