NetApp StorageGRID Webscale Arbitrary Object Deletion Vulnerability

NetApp StorageGRID Webscale is a suite of scalable object storage software from American NetApp. A security vulnerability exists in NetApp StorageGRID Webscale, which allows remote attackers to exploit the vulnerability to commit special deletion of arbitrary objects...

PT-2017-12548

Name of the Vulnerable Software and Affected Versions NetApp StorageGRID Webscale versions 10.2.x through 10.2.2.2 NetApp StorageGRID Webscale versions 10.3.x through 10.3.0.3 NetApp StorageGRID Webscale versions 10.4.x through 10.4.0.1 Description The issue allows remote authenticated users to...

PostgreSQL PL/Java Arbitrary Object Access Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java 9.0 and earlier versions. An attacker can exploit the...

Arbitrary Object Creation And Arbitrary Code Execution

mathjs is vulnerable to arbitrary object creation and arbitrary code execution attacks. The attacks exist because it does not properly check whether the methods being called are safe methods i.e., the method being called is not defined on the the prototype of the native object. For example,...

Subrion CMS PHP Object Injection Vulnerability

Subrion CMS is an open source content management system CMS. Subrion CMS suffers from a PHP object injection vulnerability that stems from a failure to adequately validate user input. An attacker can use this vulnerability to inject arbitrary objects into the application, delete files, view files...

CubeCart 5.2.0 PHP Object Injection

------------------------------------------------------------------------- CubeCart set'shipping', unserializebase64urldecode$POST'shipping'; 522. if !isset$POST'proceed' 523. httpredircurrentPage; 524. 525. User input passed through the $POST'shipping' parameter is not properly sanitized before...