Dynamic Swagger Support Comes to Imperva

It’s no secret that the shift to DevOps deployments has taken center stage at organizations small and large. The ability to quickly configure, manage and update via APIs is critical to a company’s ability to push out small iterative changes, without human intervention. And Swagger has become the...

Directory Traversal Vulnerability in Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is a professional environmental protection Internet of Things products and solutions provider. Beijing Wanwei Yingchuang Technology Development Co., Ltd. pollution source online monitoring system there is a directory traversal...

agoo environmental issues loophole

agoo is a Ruby-based HTTP server by Peter Ohler Software Developers. An environmental issue vulnerability exists in agoo 2.12.3 and earlier versions. An attacker can exploit this vulnerability by sending the Content-Length header twice to conduct an HTTP request smuggling attack...

Reel Environmental Issues Vulnerability

Reel is an open source "event-based" Web server . An environmental issue vulnerability exists in Reel 0.6.1 and earlier versions, which can be exploited to conduct HTTP request smuggling attacks because the program does not properly parse the Content-Length and Transfer Encoding headers...

Information Disclosure

aegir is vulnerable to Information Disclosure. Environmental variables in the browser bundle contains tokens and keys, which can be leaked during aegir publish or aegir build...

environmentalconsultantsmanchester.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-1175272 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

GHSA-QFCV-5WHW-7PCW Exposure of Sensitive Information to an Unauthorized Actor in AEgir

Impact aegir publish and aegir build may leak secrets from environmental variables in the browser bundle published to npm. Patches The code has been patched, users should upgrade to = 21.10.1 Workarounds Run printenv to check your environment variables and revoke any secrets. For more information...

Exposure of Sensitive Information to an Unauthorized Actor in AEgir

Impact aegir publish and aegir build may leak secrets from environmental variables in the browser bundle published to npm. Patches The code has been patched, users should upgrade to = 21.10.1 Workarounds Run printenv to check your environment variables and revoke any secrets. For more information...

netius realm problem vulnerability

netius is a Python library that can be used to create asynchronous non-blocking servers and clients from the Hive Solutions team in Portugal. An environmental issue vulnerability exists in versions prior to netius 1.17.58. The vulnerability stems from an unreasonable environmental factor in a...

Shanxi Xianqi Technology Co., Ltd. environmental times enterprise online bookkeeping management system there are logic flaws vulnerability

Eco Times Business Online Bookkeeping Management System is a bookkeeping system for micro and small businesses and households. Shanxi Xianqi Technology Co., Ltd Environmental Times Enterprise Online Bookkeeping Management System has a logic flaw vulnerability that can be exploited by an attacker ...

Accelerator Program for Early-Stage Innovations in Water Update: Introducing our Innovators!

This Earth Day, we are excited to announce the first two grantees of Akamai's Accelerator Program for Early-Stage Innovations in Water: the Ashoka Trust for Research in Ecology and the Environment ATREE and the Foundation for Environmental Monitoring ffem. The Akamai Technologies India Corporate...

Arbitrary File Deletion Vulnerability in Environmental Times Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

ZSQL: Audit File Path

The LOGHOME parameter specifies the storage path of the audit file. By default, the audit file is stored in the $GSDBDATA/log/audit directory. Note: The script compares the LOGHOME in DVPARAMETERS with the $GSDBDATA/log environmental variable. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...

io.micronaut:micronaut-http-client environment issue vulnerability

Object Computing micronaut is a JVM-based full-stack framework from Object Computing, Inc. It is mainly used to build modular microservices and serverless applications. io.micronaut: micronaut-http-client is one of the HTTP client. An environmental issue vulnerability exists in io.micronaut:...

Keeping Our Kids and Our Earth Safe: Thoughts for Earth Day

This April 22 marks the 50th anniversary of Earth Day, an annual event celebrated around the world to demonstrate support for environmental protection. First celebrated in 1970, it now includes events coordinated globally by the Earth Day Network in more than 193 countries. As we get ready to...

Apache Traffic Server Environment Issue Vulnerability (CNVD-2020-21910)

Apache Traffic Server ATS is the United States Apache Apache Software Foundation's set of scalable HTTP proxy and caching server. An environmental issue vulnerability exists in Apache ATS versions 6.0.0 through 6.2.3, 7.0.0 through 7.1.8, and 8.0.0 through 8.0.5, which stems from incorrect input...

Cross site scripting

A vulnerability has been identified in Spectrum Power™ 5 All versions v5.50 HF02. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to...

CVE-2020-7579

A vulnerability has been identified in Spectrum Power™ 5 All versions v5.50 HF02. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to...

Waitress environmental vulnerability (CNVD-2020-18632)

Waitress is a WSGI Web Server Gateway Interface server for Python. Waitress is vulnerable to an environmental issue. The vulnerability stems from an unreasonable environmental factor in a networked system or product. Detailed vulnerability details are not available at this time...

Netty Environment Issues Vulnerabilities

Netty is a non-blocking I/O client-server framework from the Netty community, which is primarily used for developing Java web applications such as protocol servers and clients. There is an environmental issue vulnerability in Netty. The vulnerability stems from an unreasonable environmental facto...