CVE-2021-37709

Shopware’s CVE-2021-37709 affects the Import/Export log-file handling. Versions prior to 6.4.3.1 are vulnerable to an insecure direct object reference of log files. A patch is available in 6.4.3.1; for older 6.1–6.3 deployments, security measures via a plugin are provided as a workaround. The fla...

CVE-2021-37709 Insecure direct object reference of log files of the Import/Export feature

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of the Import/Export feature. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding securit...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

DEBIAN-CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

Information disclosure

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

UBUNTU-CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists ...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The WordPress Plugin is a WordPress open source application plugin that supports personal blogging sites on PHP and MySQL servers. Manager fails to clean up or escape its "phpid" setting before...

Shopware 日志信息泄露漏洞

Shopware is an open source e-commerce software.The import/export functionality in versions of Shopware prior to 6.4.3.1 is vulnerable to insecure direct object referencing of log files. No detailed vulnerability details are currently available...

gitit 安全漏洞

gitit is an open source wiki program written in Haskell. It uses Happstack as a web server and pandoc for markup processing. A security vulnerability exists in gitit versions prior to 0.15.0.0, which can be exploited to leak information from files using the export feature...

GHSA-VXF5-WXWP-M7G9 Open Redirect in Next.js

Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/error.js was statically generated, allowing an open redirect to occur to an external site. In general, this redirect does not directly...

DEBIAN-CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

openSUSE: Security Advisory for python-CairoSVG, (openSUSE-SU-2021:1134-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1134-1 Security update for python-CairoSVG, python-Pillow

This update for python-CairoSVG, python-Pillow fixes the following issues: Update to version 2.5.1. Security fix: When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service REDoS. If an attacker provided a malicious SVG, it...