32 matches found
CVE-2022-36007 Partial Path Traversal in com.github.jlangch:venice
Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions load-file and load-resource. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the lo...
CVE-2022-36007
Venice (com.github.jlangch:venice) contains a Partial Path Traversal flaw in the load-file and load-resource functions. When given absolute paths whose name prefix matches a configured load path (e.g., "/Users/foo/resources"), an attacker can access files outside the intended directory (e.g., "/U...
CVE-2022-36007: Improper Limitation of a Pathname to a Restricted Directory
Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions load-file and load-resource. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the lo...
PT-2022-23106
Name of the Vulnerable Software and Affected Versions Venice versions prior to 1.10.18 Description A partial path traversal issue exists within the functions load-file and load-resource. These functions can be limited to load files from a list of load paths. When passing absolute paths to these t...
venice-ads.venicexplorer.net Cross Site Scripting vulnerability OBB-1487872
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
venice-ads.venicexplorer.net Cross Site Scripting vulnerability OBB-1467001
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
venice-ads.venicexplorer.net Cross Site Scripting vulnerability OBB-1454471
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
wallpaper.venicexplorer.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153085 Security Researcher KhanJanny Helped patch 3061 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
casagenoveffa.com XSS vulnerability
Open Bug Bounty ID: OBB-649126 Description| Value ---|--- Affected Website:| casagenoveffa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
port.venice.it XSS vulnerability
Open Bug Bounty ID: OBB-577483 Description| Value ---|--- Affected Website:| port.venice.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
danielihotelvenice.com XSS vulnerability
Vulnerable URL: http://www.danielihotelvenice.com/ru/search?q=%22%3E%3Cimg+src=a+onerror=prompt%28/XSSposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
Unfixed XSS vulnerability at www.veniceairport.it
Security researcher Langy, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.veniceairport.it, which at the time of submission ranked 244332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...