5772 matches found
Withdrawn
Withdrawn: duplicate of GHSA-2m39-62fm-q8r3...
Withdrawn
Withdrawn: duplicate of GHSA-wjr4-2jgw-hmv8...
coturn < 4.5.1.3 Information Disclosure Vulnerability
coturn is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-15084
In express-jwt NPM package up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this...
GHSA-6PHF-73Q6-GH87 vulnerabilities
Vulnerabilities for packages: hadoop-fips, trino...
GHSA-MVR2-9PJ6-7W5J vulnerabilities
Vulnerabilities for packages: druid...
GHSA-MVR2-9PJ6-7W5J vulnerabilities
Vulnerabilities for packages: druid, hadoop-fips, spark, spark-fips...
GHSA-V3XW-C963-F5HC vulnerabilities
Vulnerabilities for packages: hive...
WordPress XSS Vulnerability (May 2020) - Windows
WordPress is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...
GHSA-H4RC-386G-6M85 vulnerabilities
Vulnerabilities for packages: hive...
CVE-2020-11008
Technical details for CVE-2020-11008 are not present in the provided connected documents. The sources discuss related CVEs and general Git credential leakage vectors but do not specify affected versions, root cause, fixes, or exploitation status for this CVE. Monitor for updates.
Remote Code Execution (RCE) vulnerability in dropwizard-validation
Summary A server-side template injection was identified in the self-validating @SelfValidating feature of dropwizard-validation enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution RCE vulnerability. If you're using a self-validating bean via @SelfValidatin...
GHSA-JXFH-8WGV-VFR2 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-PCQQ-5962-HVCW Denial of Service in uap-core when processing crafted User-Agent strings
Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....
Denial of Service in uap-core when processing crafted User-Agent strings
Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....
GHSA-H4MF-75HF-67W4
creationtimestamp| type| source ---|---|--- 2020-03-06 09:48:23+00:00| seen| https://t.me/canyoupwnme/6311 2022-12-11 18:39:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/745...
HTTP Response Splitting in Styx
Vulnerability Styx is vulnerable to CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting'. Vulnerable Component The vulnerable component is the com.hotels.styx.api.HttpHeaders.Builder due to disabling the HTTP Header validation built into Netty in these...
Fedora 31 : golang-github-gorilla-websocket (2020-0ae6297680)
Update to latest version. Fix GHSA-jf24-p9p9-4rjh. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
Fedora 30 : golang-github-gorilla-websocket (2020-8f18c45545)
Update to latest version. Fix GHSA-jf24-p9p9-4rjh. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....