Harbor User Enumeration Vulnerability

Harbor is an open source trusted cloud native registry. The product is primarily used to store, sign and scan container images for vulnerabilities. A security vulnerability exists in the '/users' API endpoint in Harbor. An attacker could use the vulnerability to bypass restrictions on this endpoi...

WordPress Information Disclosure Vulnerability (CNVD-2017-00618)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php file...

DEBIAN-CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

PT-2009-4245 · Ulteo · Ulteo Open Virtual Desktop

Name of the Vulnerable Software and Affected Versions: Ulteo Open Virtual Desktop version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several API endpoints, including...