Linux Distros Unpatched Vulnerability : CVE-2013-7370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware CVE-2013-7370 Note that Nessus relies on the presence of the package as reported by the...

SUSE CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

SUSE CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2022-24794 Open Redirect in express-openid-connect

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the requiresAuth middleware, either directly or through the default authRequired option, are vulnerable to an Open Redirect when the middleware is applied to a catch all...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...

'prvProcessICMPPacket' Function Information Disclosure Vulnerability in Multiple Products

AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...

CVE-2018-16603

CVE-2018-16603 affects AWS FreeRTOS up to v1.3.1 and FreeRTOS up to v10.0.1 (with FreeRTOS+TCP), plus the WHIS Connect TCP/IP component. The issue is an out-of-bounds access in the TCP stack: processing received TCP packets can leak data by corrupting access to TCP source/destination port fields ...

CVE-2018-16603: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an...

PT-2018-13614

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows remote attackers to leak information or...

PT-2018-13639

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue is related to out of bounds memory access during...

PT-2018-13642

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description An issue in the affected software allows out of bounds acce...

CVE-2018-16600: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure...

PT-2018-13638

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue is related to out of bounds memory access during...

PT-2018-13612

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows information disclosure during the parsing ...

PT-2018-13613

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2018-13611

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows division by zero in prvCheckOptions...

PT-2018-13615

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows information disclosure during the parsing ...