12711 matches found
UBUNTU-CVE-2021-38711
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
CVE-2021-38711
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
CVE-2021-38711
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
CVE-2021-38711
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
CVE-2021-38711
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
WordPress plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists ...
PT-2021-22272
Name of the Vulnerable Software and Affected Versions gitit versions prior to 0.15.0.0 Description The Export feature in gitit can be exploited to leak information from files. Recommendations For versions prior to 0.15.0.0, update to version 0.15.0.0 or later to resolve the issue...
WordPress plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The WordPress Plugin is a WordPress open source application plugin that supports personal blogging sites on PHP and MySQL servers. Manager fails to clean up or escape its "phpid" setting before...
CVE-2021-38711: Files or Directories Accessible to External Parties
In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...
CVE-2021-37709: Insertion of Sensitive Information into Log File
Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of the Import/Export feature. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding securit...
Shopware log information leakage vulnerability
Shopware is an open source e-commerce software.The import/export functionality in versions of Shopware prior to 6.4.3.1 is vulnerable to insecure direct object referencing of log files. No detailed vulnerability details are currently available...
PT-2021-21827
Name of the Vulnerable Software and Affected Versions Shopware versions prior to 6.4.3.1 Description The issue involves an insecure direct object reference of log files of the Import/Export feature. This allows unauthorized access to sensitive information. A patch for this issue is available in...
gitit security vulnerabilities
gitit is an open source wiki program written in Haskell. It uses Happstack as a web server and pandoc for markup processing. A security vulnerability exists in gitit versions prior to 0.15.0.0, which can be exploited to leak information from files using the export feature...
GHSA-VXF5-WXWP-M7G9 Open Redirect in Next.js
Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/error.js was statically generated, allowing an open redirect to occur to an external site. In general, this redirect does not directly...
DEBIAN-CVE-2021-32438
The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
UBUNTU-CVE-2021-32438
The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-32438
The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
openSUSE: Security Advisory for python-CairoSVG, (openSUSE-SU-2021:1134-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2021:1134-1 Security update for python-CairoSVG, python-Pillow
This update for python-CairoSVG, python-Pillow fixes the following issues: Update to version 2.5.1. Security fix: When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provided a malicious SVG, it...
CVE-2021-33256
A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The jusername parameter seems to be vulnerable and a reverse shell could be obtained if a privileged user exports "User Attempts Audit Repor...