225 matches found
amethyst (>=0.5.0 <=0.5.1), specs (>=0.8.0 <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (=0.1.0)
ticketedlock CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - amethyst =0.5.0, =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:GHSA-77M6-X95J-75R5...
AsgoreCore (>=0.1.0 <=0.1.2), RustyBox (=0.1.0) +425 more potentially affected by CVE-2021-26955 +3 more via xcb (>=0.10.1 <=0.9.0)
xcb CARGO version =0.10.1, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =1.0.9, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 and more Source cves: CVE-2021-26955, CVE-2021-26956, CVE-2021-26957, CVE-2021-26958 Source advisory: OSV:GHSA-2XPG-3HX4-FM9R...
amethyst (>=0.7.0 <=0.15.3), amethyst-console (=0.1.0) +31 more potentially affected by CVE-2021-25902 via glsl-layout (>=0.1.1 <=0.3.2)
glsl-layout CARGO version =0.1.1, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.6.0, =0.1.0, =0.3.0, =0.4.0, =0.2.0, =0.15.3 - amethystinput =0.6.0 and more Source cves: CVE-2021-25902 Source advisory: OSV:GHSA-CX4J-FXR7-JXG8...
AsgoreCore (>=0.1.0 <=0.1.2), RustyBox (=0.1.0) +425 more potentially affected by CVE-2020-36205 via xcb (>=0.10.1 <=0.9.0)
xcb CARGO version =0.10.1, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =1.0.9, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 and more Source cves: CVE-2020-36205 Source advisory: OSV:GHSA-C8HQ-X4MM-P6Q6...
acheron (=0.1.0), actix_web_metrics_mw (>=0.0.1 <=0.3.1) +142 more potentially affected by CVE-2020-25791 +5 more via sized-chunks (>=0.1.3 <=0.5.3)
sized-chunks CARGO version =0.1.3, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.10.0, =0.10.0, =0.1.1, =0.33.0, =0.45.1 - cargo-authors =0.5.0 and more Source cves: CVE-2020-25791, CVE-2020-25792, CVE-2020-25793, CVE-2020-25794, CVE-2020-25795, CVE-2020-25796 Source...
actix (>=0.5.0 <=0.7.7), actix-ogn (=0.1.0) +270 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0 <=0.2.1)
memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.4.0, =0.7.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:GHSA-RH89-X75F-RH3C...
airmash-protocol (>=0.2.0 <=0.3.0), altv-core (=0.1.0) +255 more potentially affected by CVE-2021-45695 via mopa (=0.2.2)
mopa CARGO version =0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mopa and may be impacted: - airmash-protocol =0.2.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.15.3 and more Source cves: CVE-2021-45695...
amethyst (>=0.7.0 <=0.15.3), amethyst-console (=0.1.0) +31 more potentially affected by CVE-2021-25902 via glsl-layout (>=0.1.1 <=0.3.2)
glsl-layout CARGO version =0.1.1, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.6.0, =0.1.0, =0.3.0, =0.4.0, =0.2.0, =0.15.3 - amethystinput =0.6.0 and more Source cves: CVE-2021-25902 Source advisory: OSV:RUSTSEC-2021-0005...
amethyst (>=0.5.0 <=0.5.1), specs (>=0.8.0 <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (=0.1.0)
ticketedlock CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - amethyst =0.5.0, =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:RUSTSEC-2020-0119...
actix (>=0.5.0 <=0.7.7), actix-ogn (=0.1.0) +270 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0 <=0.2.1)
memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.4.0, =0.7.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...
Amethyst 0.1.5 - XSS Vulnerability
No description provided by source. Vulnerability ID: HTB22502 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst2.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor...
CVE-2010-5085
Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...
CVE-2010-5085
CVE-2010-5085 concerns multiple CSRF vulnerabilities in Hulihan Amethyst 0.1.5 (admin/update_user and related endpoints) that allow remote attackers to hijack administrator authentication to change credentials or site configuration. The NVD description confirms cross-site request forgery risks en...
CVE-2010-5085
Multiple cross-site request forgery CSRF vulnerabilities in admin/updateuser in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...
XSS vulnerability in Amethyst
Vulnerability ID: HTB22501 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst1.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor Notification: 22 July 2010...
XSS vulnerability in Amethyst
Vulnerability ID: HTB22499 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerabili...
XSS vulnerability in Amethyst
Vulnerability ID: HTB22502 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst2.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor Notification: 22 July 2010...
XSRF (CSRF) in Amethyst
Vulnerability ID: HTB22500 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinamethyst.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...
Amethyst 0.1.5 Cross Site Request Forgery / Cross Site Scripting
================================================ Vulnerability ID: HTB22499 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior...
Amethyst 0.1.5 - Cross-Site Scripting
Amethyst 0.1.5 - Cross-Site Scripting Vulnerability ID: HTB22502 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst2.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor...