Cross-site Scripting (XSS)

spacewalk-backend is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as a cross-site scripting XSS flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perfo...

Privilege Escalation

spacewalk-backend is vulnerable to privilege escalation attacks. The vulnerability exists as it was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py...

Denial Of Service (DoS)

python-django-horizon is vulnerable to denial of service. Session records are not properly handled when using a db or memcached session engine, allowing remote attackers to make repeated requests to the login page to create excessive backend session entries which would potentially result in a...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as an off-by-one error leading to a crash was discovered in openldap's processing of DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS response...

Information Disclosure

openstack-glance is vulnerable to information disclosure attacks. The vulnerability exists as OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING...

Authorization Bypass

python-keystoneclient is vulnerable to authorization bypass. An attacker with direct write access to the memcache backend is able to insert malicious data and bypass the encryption to tamper the encrypted data or modify data in memcached. Only setups that use memcache caching in the Keystone...

Information Disclosure

spacewalk-backend is vulnerable to information disclosure attacks. The vulnerability exists as the Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skippi...

Improper Invalidation Of Token

openstack-keystone is vulnerable to access bypass attacks. The vulnerability exists as the memcache token backend in OpenStack Identity Keystone 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not inclu...

PT-2019-8297 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.3.4 Description: The issue is related to a PHP Object Instantiation problem. It can be triggered via the sort parameter to the loadPreviewAction method of the Shopware Controllers Backend ProductStream controller...

SQL injection vulnerability in zzzphp V1.6.0 backend sa***.php page

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 SQL injection vulnerability exists in the background sa.php page, which can be exploited by attackers to obtain sensitive information from the database...

Code execution vulnerability in zzzphp V1.6.0 backend

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 code execution vulnerability exists in the background, an attacker can exploit the vulnerability to execute arbitrary code and obtain control of the web server...

ALPINE-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

DEBIAN-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

Fedora 28 : php-horde-Horde-Image (2019-944ff52ce6)

HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...

Open-Xchange OX App Suite backend component information disclosure vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. backend is one of the backend components. An information disclosure vulnerability exists in the backend component in...

Code Execution Vulnerability in Knight CMS Admin Backend

74cms Knight CMS is a PHP-based open source professional talent system. Knight CMS management background code execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

Open-Xchange OX App Suite backend component cross-site scripting vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. backend is one of the backend components. A cross-site scripting vulnerability exists in the backend component in...

UBUNTU-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

HackerOne: Response program can display "eligible for bounty" in scope area in program policy

Hello Hackerone Team and @jobert First of all, Happy new year to everyone. Summary Response program can also display "eligible for bounty" assets on program policy. It's basically causing from backend in terms of GRAPHQL mutation query for eligible in bounty:true which stays forever on response...

Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product:...