101 matches found
GHSA-62QF-QM3G-FVCW Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
CVE-2024-42447
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
CVE-2024-42447 Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
CVE-2024-42447 Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
CVE-2024-42447 Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow
Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...
CVE-2024-42447
CVE-2024-42447 – Insufficient Session Expiration in Apache Airflow Providers FAB. The issue affects FAB:1.2.1 (when used with Airflow 2.9.3) and FAB:1.2.0 for all Airflow versions, where logout could be prevented. FAB 1.2.2 fixes the issue, and upgrading FAB (or Airflow to the latest supported ve...
victorymachineandfab.com Cross Site Scripting vulnerability OBB-3906417
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fab-i40.de Improper Access Control vulnerability OBB-3816768
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fab-i40.de Improper Access Control vulnerability OBB-3776513
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
多款TRUMPF产品安全漏洞
TRUMPF TruTops and others are TRUMPF products.TRUMPF TruTops is TRUMPF Oseon is an integrated solution for production and material flow control.TRUMPF Job Order Interface is a software job order interface. A security vulnerability exists in several TRUMPF products that stems from the use of defau...
Multiple MediaTek chip isp local privilege elevation vulnerabilities
MediaTek Inc. is the world's fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices with MediaTek chips built into them hitting the market around the world...
Multiple MediaTek Chips Autoboot Access Control Error Vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
The vulnerability of software products for control, management, and simulation in TRUMPF TruTops Boost, TruTops Fab, and TruTops Monitor machines lies in the absence of an authentication procedure for the critical function, allowing attackers to execute commands with elevated privileges.
The vulnerability of software products for control, management, and simulation in TRUMPF TruTops Boost, TruTops Fab, and TruTops Monitor machines is related to the absence of an authentication procedure for the critical function. Exploiting this vulnerability could allow a malicious actor to...
fab-elec.fr Cross Site Scripting vulnerability OBB-1308705
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for Cross-site Scripting in Oldstreetsolutions Live_Input_Macros
CVE-2019-15233 FAB-2019-00157 Vulnerability discoverd by me...
fab-group.fr XSS vulnerability
Open Bug Bounty ID: OBB-458254 Description| Value ---|--- Affected Website:| fab-group.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
fab-guru.com XSS vulnerability
Vulnerable URL: https://www.fab-guru.com/shoes.php?shoes=highheels=1/-///'/"//--...
Fab Tattoo Artist Secret Salon - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Fab Tattoo Artist Secret Salon published at the 'play' market has multiple vulnerabilities...
CeWL - Custom WordList Generator Tool for Password Cracking
CeWL is a ruby app which spiders a given url to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper. CeWL also has an associated command line app, FAB Files Already Bagged which uses the same meta...