876 matches found
PYSEC-2021-423
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...
PYSEC-2021-423
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...
CVE-2020-19003
CVE-2020-19003 affects Gate One 1.2.0. The vulnerability allows bypassing the verification check done by the origins list, enabling a connection to Gate One instances used by hosts not on the origins list. Closely related advisories (GHSA, Red Hat, OSV, PYSEC) describe the same issue; no exploit ...
CVE-2020-19003
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...
WordPress Age Gate plugin <= 2.16.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Martin Vierula Trustwave in WordPress Age Gate plugin versions = 2.16.3. Solution Update the WordPress Age Gate plugin to the latest available version at least 2.16.4...
PT-2021-10271 · Gate One · Gateone
Name of the Vulnerable Software and Affected Versions: Gate One version 1.2.0 Description: The issue allows attackers to bypass the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list. Recommendations: For Gate One version 1.2.0,...
Age Gate < 2.16.4 - Authenticated Stored Cross-Site Scripting
The plugin does not sanitise and escape the 'Additional content' setting of its 'Messaging' page, which could allow users having access to such setting by default admin, but the plugin has a feature to change this and allow access to lower privileged users to perform Cross-Site Scripting attacks...
Gate One 授权问题漏洞
Gate One is an Html5 based terminal emulator and Ssh client. A security vulnerability exists in Gate One version 1.2.0, which stems from an issue in the software that allows an attacker to exploit the vulnerability to bypass authentication checks in the source list and connect to a Gate One...
Schneider Electric 多款产品授权问题漏洞
Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on personal computers. An authorization issue vulnerability exists in several Schneider Electric products, which could allow remote code execution when a...
Schneider Electric C-Bus Toolkit Missing Authentication Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Schneider Electric C-Bus Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
Know where your project stands with the new project overview!
In late April, I introduced the new project experience for SonarCloud, which has already been adopted by a lot of you. Today, we’re adding a brand new project overview page! We can’t wait for you to try it! Let’s discover what’s inside in this blog. Your project status & activity all in one place...
7 more reasons to upgrade to SonarQube 8.9 LTS
SonarQube v8.9 LTS was just released and we hope you’ve already seen our announcement and are working on your upgrade! A new SonarQube LTS represents a huge amount of work. Since the release of the previous SonarQube LTS v7.9, in November 2019, there have been over 5200 development tickets merged...
Broken pipelines for everyone!
With SonarQube 8.9 LTS, SonarSource has made failing the pipeline available for everyone, using any CI you want. For people watching for a long time, this might seem like a contradiction. Let me explain. Yes, we have gone back and forth for a while on this feature, but the user community has...
Gate One Directory Traversal Vulnerability (Dec 2020)
Gate One is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:liftoffsoftware:gateone...
Schneider Electric C-Gate Detection
Binary data schneiderelectriccgatedetect.nbin...
Schneider Electric C-Gate < 2.11.6 Multiple Vulnerabilities
Binary data schneiderelectriccgateicsa-21-105-01.nbin...
Parallels Desktop OTG Information Disclosure Vulnerability
Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in the Open Tools Gate component in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a lack of proper locking when performing operations on objects. A loc...
Parallels Desktop OTG Heap Buffer Overflow Vulnerability
Parallels Desktop is a virtual machine software that runs on Mac computers. A heap buffer overflow vulnerability exists in the Open Tools Gate component in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a failure to properly validate the length of user-supplied data before...
CVE-2021-31427
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-31424
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...