12680 matches found
Puppet Enterprise < 2019.8.6 Unsantized Input Vulnerability
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin...
PT-2023-28487 · Chef · Chef Inspec
Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...
CVE-2021-33637
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
Command injection
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637 Export container in a malicious directory may cause process to be hijacked
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container...
CVE-2021-33637
CVE-2021-33637 describes a vulnerability in iSulad where, when the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. The Red Hat CVD entry mirrors this description. Several open‑source advisories (...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from an attacker being able to escape a container when the isula export command exports the container to an image and the container is under the control of an...
PT-2023-12217 · Isula · Isula
Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container...
CVE-2023-46346
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
CVE-2023-46346
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
Path traversal
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
WordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
Software Export WP Page to Static HTML/CSS Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-31077 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a34d8e80f8d Credits...
CVE-2023-46346: Improper Limitation of a Pathname to a Restricted Directory
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
PrestaShop Path Traversal Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image zoom and other features. A security vulnerability exists in PrestaShop Product Catalog CSV, Excel, XML Export PRO 4.1.1 and...
PT-2023-29967 · Unknown · Product Catalog (Csv
Name of the Vulnerable Software and Affected Versions: Product Catalog CSV, Excel, XML Export PRO versions up to 4.1.1 Description: A path traversal attack can be performed by a guest to download personal information without restriction. This is due to a lack of permissions control and a lack of...
Oracle Outside In Technology SDK Multiple Data Compromise
The vulnerabilities of the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK components of Oracle Outside In Technology’s software development kit SDK exist due to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to compromise the...
