Drupal Unpublished Node Permissions 安全漏洞

Drupal Unpublished Node Permissions is an extension developed by Drupal Corporation that allows for controlling access to unpublished content. Versions of Drupal Unpublished Node Permissions prior to 1.7.0 contained security vulnerabilities; these vulnerabilities were due to improper authorizatio...

JOBE 命令注入漏洞

JOBE is a server for running small programming jobs in various programming languages by Richard Lobb, a personal developer. A command injection vulnerability exists in JOBE versions prior to 1.7.0, which originates in the function runinsandbox in the file application/libraries/LanguageTask.php,...

DEBIAN-CVE-2010-3073

SSLCipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms...