SUSE-SU-2021:1835-1 Security update for ceph

This update for ceph fixes the following issues: - Update to 15.2.12-83-g528da226523: - CVE-2021-3509 fix cookie injection issue bsc1186021 - CVE-2021-3531 RGWSwiftWebsiteHandler::iswebdir checks empty subdirname bsc1186020 - CVE-2021-3524 sanitize \r in s3 CORSConfiguration’s ExposeHeader...

SUSE-SU-2021:1834-1 Security update for ceph

This update for ceph fixes the following issues: - Update to 15.2.12-83-g528da226523: - CVE-2021-3509 fix cookie injection issue bsc1186021 - CVE-2021-3531 RGWSwiftWebsiteHandler::iswebdir checks empty subdirname bsc1186020 - CVE-2021-3524 sanitize \r in s3 CORSConfiguration’s ExposeHeader...

Unspecified Vulnerability in Devellion Cubecart

Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images in an online store, etc. A security vulnerability exists in Cubecart version 6.4.2, which stems from the...

CVE-2021-33394

Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker...

CVE-2020-35591

Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the...

CVE-2020-23630

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

CVE-2020-23630

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

Sql injection

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

CVE-2020-23630

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

PT-2021-10918

Name of the Vulnerable Software and Affected Versions zzcms version ver201910 Description A blind SQL injection issue exists, based on time, and is related to cookie injection. Recommendations For zzcms version ver201910, consider restricting access to sensitive areas of the application to minimi...

curl security update

7.29.0-59.0.1.1 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case...

Pulse Connect Secure < 9.1R9 (SA44601)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is prior to 9.1R9. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the Pulse Connect Secure 9.1R9 admin web interface could allow an authenticated attacker to perfor...

Pulse Policy Secure < 9.1R9 (SA44601)

According to its self-reported version, the version of Pulse Policy Secure running on the remote host is prior to 9.1R9. It is, therefore, affected by the following vulnerabilities: - A vulnerability in the Pulse Connect Secure 9.1R9 admin web interface could allow an authenticated attacker to...

Pulse Connect Secure/Pulse Policy Secure Arbitrary Cookie Injection Vulnerability

Pulse Connect Secure is the mobile VPN that gives you secure access to enterprise applications and services in the data center or cloud from any device.Pulse Policy Secure is a suite of NAC and BYOD solutions. An arbitrary cookie injection vulnerability exists in Pulse Connect Secure/Pulse Policy...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

Design/Logic Flaw

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

CVE-2020-8261

CVE-2020-8261: A vulnerability in Pulse Connect Secure / Pulse Policy Secure versions prior to 9.1R9 allows arbitrary cookie injection via the admin/web interfaces. Root cause details are not elaborated in the provided sources, but multiple advisories corroborate the issue. Affected products are ...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

PT-2020-20068 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure / Pulse Policy Secure versions prior to 9.1R9 Description: A vulnerability in the Pulse Connect Secure / Pulse Policy Secure allows for arbitrary cookie injection. Recommendations: For Pulse Connect Secure / Pulse Policy...