550 matches found
Improper access control
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users...
CVE-2021-22896
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users...
CVE-2021-22896
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users...
PT-2021-15260
Name of the Vulnerable Software and Affected Versions Nextcloud Mail versions prior to 1.9.5 Description The issue is related to improper access control due to a missing permission check. This allows other authenticated users to create mail aliases for other users. Recommendations For versions...
CVE-2021-22896: Missing Authorization
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users...
Alias creation did not validate account ID
None...
Scytl sVote 代码注入漏洞
Scytl sVote is a Spanish Scytl open source application. Provides voters to vote online. Scytl sVote 2.1 suffers from an injection vulnerability that can be exploited by an attacker to inject code for execution by creating an election event and injecting a payload on the event alias...
Redisgraph Code Issue Vulnerability
Redisgraph is a graph model-based database from the Redisgraph community. A security vulnerability exists in RedisGraph 2.x series version 2.2.11 and earlier, which stems from having a null pointer dereference, which can cause the server to crash because it incorrectly handles unquoted strings,...
Grafana Cross-Site Scripting Vulnerability (CNVD-2020-59697)
Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A cross-site scripting vulnerability exists in Grafana versions prior to 7.1.0-beta 1...
Ubuntu: Security Advisory (USN-4515-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4515-1 pure-ftpd vulnerability
Antonio Norales discovered that Pure-FTPd incorrectly handled directory aliases. An attacker could possibly use this issue to access sensitive information. CVE-2020-9274...
USN-4515-1: Pure-FTPd vulnerability
Antonio Norales discovered that Pure-FTPd incorrectly handled directory aliases. An attacker could possibly use this issue to access sensitive information. CVE-2020-9274...
openSUSE Security Update : nasm (openSUSE-2020-954)
This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...
"Reprotect storage volumes after failover" operation fails during storage plan execution
Challenge If you enable the "Trigger reverse replication to reprotect the failed-over volumes" option when running a storage plan, Veeam Recovery Orchestrator triggers the operation of resynchronizing the SnapMirror relationship in the reverse direction. In a reverse resynchronization operation,...
CVE-2020-14927
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
CVE-2020-14927
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
Cross site scripting
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites Create Aliases Add" screen...
CVE-2020-14927
Navigate CMS 2.9 has a cross-site scripting (XSS) flaw exploitable via the Alias or Real URL field in Web Sites > Create > Aliases > Add. CVSS details: v3.1 base score 4.8 (AV:N, AC:L, PR:H, UI:R, S:C, C:L, I:L, A:N) and v2 base score 3.5 (AV:N, AC:M, Au:S, C:N, I:P, A:N). Exploitation s...