1299 matches found
Insecure random number generation in keypair
Description and Impact A bug in the pseudo-random number generator used by keypair versions up to and including 1.0.3 could allow for weak RSA key generation. This could enable an attacker to decrypt confidential messages or gain authorized access to an account belonging to the victim. We recomme...
GitHub Security Lab: [Python] CWE-348: Client supplied ip used in security check
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-200: Query to detect exposure of sensitive information from android file intent
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python] CWE-522: Insecure LDAP Authentication
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: New experimental query: Clipboard-based XSS
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: ihsinme: Add query for CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-079: Query to detect XSS with JavaServer Faces (JSF)
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java]: Add XXE sinks
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: Static initialization vector
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [C#]: Deserialization sinks
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: Timing attacks while comparing results of cryptographic operations
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [C#]: HttpOnly and Secure Cookies for .NET Core and .NET
This bug was reported directly to GitHub Security Lab...
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 Because the 2 xmlrpc related requets in webtools...
GitHub Security Lab: [Java] CWE-601: Add Spring URL Redirect ResponseEntity sink
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python]: Add SqlAlchemy support for SQL injection query
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python] CWE-287: LDAP Improper Authentication
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: Unsafe deserialization with Jackson
This bug was reported directly to GitHub Security Lab...
CVE-2021-32783
Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy...