Unspecified Vulnerability in IPFS

IPFS is a distributed file system developed in the Go language by the Ipfs IPFS team. A security vulnerability exists in IPFS that stems from control characters not being escaped from the console output, which can be exploited by an attacker to perform unknown malicious operations...

CVE-2020-26283

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown,...

CVE-2020-26283

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown,...

Design/Logic Flaw

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown,...

CVE-2020-26283 Control character injection in console output

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown,...

CVE-2020-26283

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown,...

EulerOS Virtualization 2.9.0 : lldpad (EulerOS-SA-2021-1658)

According to the version of the lldpad package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This...

EulerOS Virtualization 3.0.6.6 : lldpad (EulerOS-SA-2021-1497)

According to the version of the lldpad package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This...

SUSE-SU-2021:0515-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2020-26116: Raise ValueError if method contains control characters and thus prevent CRLF injection into URLs bsc1177211...

Updated python-urllib3 packages fix security vulnerability

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest CVE-2020-26137...

EulerOS 2.0 SP8 : lldpad (EulerOS-SA-2020-2519)

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an...

BigBlueButton has an unspecified vulnerability

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. security vulnerabilities exist in versions prior to BigBlueButton 2.2.29, the source of the vulnerability lacks cleanup for certain parameters, as evidenced by the control characters in the accepted username...

CVE-2020-28954

web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...

Code injection

web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...

BigBlueButton 安全漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. security vulnerabilities exist in versions prior to BigBlueButton 2.2.29, the source of the vulnerability lacks cleanup for certain parameters, as evidenced by the control characters in the accepted username...

EulerOS 2.0 SP5 : lldpad (EulerOS-SA-2020-2290)

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an...

EulerOS 2.0 SP9 : lldpad (EulerOS-SA-2020-2234)

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an...

EulerOS 2.0 SP9 : lldpad (EulerOS-SA-2020-2233)

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an...

Huawei EulerOS: Security Advisory for lldpad (EulerOS-SA-2020-2234)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : Python -- multiple vulnerabilities (33c05d57-bf6e-11ea-ba1e-0800273f78d3)

Python reports : The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service. Fix the regex to prevent the catastrophic backtracking. Vulnerability reported by Ben Caller and Matt Schwage...