2094 matches found
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
CVE-2021-30622
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
CVE-2021-30622: Use After Free
Chromium: CVE-2021-30622 Use after free in WebApp Installs...
PT-2021-5259
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 93.0.4577.63 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in WebApp Installs, which can lead to heap corruption. This could potentially allow ...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebApp Installs. The vulnerability is caused by use after the WebApp installation is free. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a...
Simple Phone Book 1.0 - 'Username' SQL Injection (Unauthenticated)
Exploit Title: Simple Phone book/directory 1.0 - 'Username' SQL Injection Unauthenticated Date: 21/08/2021 Exploit Author: Justin White Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13011/phone-bookphone-directory.html Version: 1.0 Testeted on:...
Simple Phone Book/Directory 1.0 SQL Injection
Exploit Title: Simple Phone book/directory 1.0 - 'Username' SQL Injection Unauthenticated Date: 21/08/2021 Exploit Author: Justin White Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13011/phone-bookphone-directory.html Version: 1.0 Testeted on:...
jetty: Symlink directory exposes webapp directory contents
If the $jetty.base directory or the $jetty.base/webapps directory is a symlink the contents of the $jetty.base/webapps directory may be deployed as a static web application, exposing the content of the directory for download. The highest threat from this vulnerability is to data confidentiality...
bivouac-framework (0.1.0a0), cornerstonecms (>=0.1.0, <=0.1.20) +5 more potentially affected by CVE-2021-23401 via flask-user (1.0.2.2)
flask-user PYPI version 1.0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-user and may be impacted: - bivouac-framework 0.1.0a0 - cornerstonecms =0.1.0, =0.1.0, =0.0.39, =0.8.8, =0.1.0, =0.1.1a6 Source cves: CVE-2021-23401 Source advisory:...
bivouac-framework (0.1.0a0), cornerstonecms (>=0.1.0, <=0.1.20) +5 more potentially affected by CVE-2021-23401 via flask-user (1.0.2.2)
flask-user PYPI version 1.0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-user and may be impacted: - bivouac-framework 0.1.0a0 - cornerstonecms =0.1.0, =0.1.0, =0.0.39, =0.8.8, =0.1.0, =0.1.1a6 Source cves: CVE-2021-23401 Source advisory:...
com.aspectran:aspectran-with-jetty (>=7.0.0, <=7.0.4), io.github.jhannes:action-controller-jakarta-demo (>=0.0.31, <=0.0.32) +58 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=11.0.1, <=11.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =11.0.1, =7.0.0, =0.0.31, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.4 and more Source cves: CVE-2021-34429 Source advisory: OSV:GHSA-VJV5-GP2W-65VM...
com.github.joschi.jersey.jetty10:jersey-container-jetty-servlet (>=2.33, <=2.34), com.hexagonkt:http_server_jetty (>=1.3.10, <=1.3.20) +38 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=10.0.1, <=10.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =10.0.1, =2.33, =1.3.10, =0.0.31, =1.9.2, =6.0.1, =6.0.1, =6.0.1, =1.2.0, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.5 and more Source cves: CVE-2021-34429 Source advisory: GHSA-VJV5-GP2W-65VM...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +1356 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=9.4.37.v20210219, <=9.4.42.v20210604)
org.eclipse.jetty:jetty-webapp MAVEN version =9.4.37.v20210219, =1.0.6, =1.0.6, =0.13.0, =0.1.7, =0.1.7, =0.2.7, =0.2.7, =0.6.1.2, =5.4.0, =3.0.1.release, =1.0.0, =0.2.2, =1.0.0, =0.2.2, =0.8.0, =1.6.0-pre and more Source cves: CVE-2021-34429 Source advisory: OSV:GHSA-VJV5-GP2W-65VM...
ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +1356 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=9.4.37.v20210219, <=9.4.42.v20210604)
org.eclipse.jetty:jetty-webapp MAVEN version =9.4.37.v20210219, =1.0.6, =1.0.6, =0.13.0, =0.1.7, =0.1.7, =0.2.7, =0.2.7, =0.6.1.2, =5.4.0, =3.0.1.release, =1.0.0, =0.2.2, =1.0.0, =0.2.2, =0.8.0, =1.6.0-pre and more Source cves: CVE-2021-34429 Source advisory: GHSA-VJV5-GP2W-65VM...
com.github.joschi.jersey.jetty10:jersey-container-jetty-servlet (>=2.33, <=2.34), com.hexagonkt:http_server_jetty (>=1.3.10, <=1.3.20) +38 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=10.0.1, <=10.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =10.0.1, =2.33, =1.3.10, =0.0.31, =1.9.2, =6.0.1, =6.0.1, =6.0.1, =1.2.0, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.5 and more Source cves: CVE-2021-34429 Source advisory: OSV:GHSA-VJV5-GP2W-65VM...
com.aspectran:aspectran-with-jetty (>=7.0.0, <=7.0.4), io.github.jhannes:action-controller-jakarta-demo (>=0.0.31, <=0.0.32) +58 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=11.0.1, <=11.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =11.0.1, =7.0.0, =0.0.31, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.4 and more Source cves: CVE-2021-34429 Source advisory: GHSA-VJV5-GP2W-65VM...
openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2005-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2005-1 advisory. - In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a...
com.aspectran:aspectran-with-jetty (>=7.0.0, <=7.0.4), io.github.jhannes:action-controller-jakarta-demo (>=0.0.31, <=0.0.32) +58 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=11.0.1, <=11.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =11.0.1, =7.0.0, =0.0.31, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.3, =2.0.4 and more Source cves: CVE-2021-34429 Source advisory: MEND:CVE-2021-34429...
com.github.joschi.jersey.jetty10:jersey-container-jetty-servlet (>=2.33, <=2.34), com.hexagonkt:http_server_jetty (>=1.3.10, <=1.3.20) +38 more potentially affected by CVE-2021-34429 via org.eclipse.jetty:jetty-webapp (>=10.0.1, <=10.0.5)
org.eclipse.jetty:jetty-webapp MAVEN version =10.0.1, =2.33, =1.3.10, =0.0.31, =1.9.2, =6.0.1, =6.0.1, =6.0.1, =1.2.0, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.1, =10.0.5 and more Source cves: CVE-2021-34429 Source advisory: MEND:CVE-2021-34429...
