Lucene search
+L

171 matches found

Fedora
Fedora
added 2022/07/31 1:37 a.m.24 views

[SECURITY] Fedora 36 Update: restic-0.12.1-4.fc36

A backup program that is easy, fast, verifiable, secure, efficient and free. Backup destinations can be: Local SFTP REST Server Amazon S3 Minio Server OpenStack Swift Backblaze B2 Microsoft Azure Blob Storage Google Cloud Storage Other Services via rclone...

2.3AI score
SaveExploits0
OSV
OSV
added 2022/07/26 12:01 a.m.37 views

GHSA-6367-P3V8-7MGW google-cloudstorage-commands Command Injection vulnerability

A command injection vulnerability affects all versions of the deprecated package google-cloudstorage-commands...

9.8CVSS7.2AI score0.00936EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/07/25 2:09 p.m.32 views

CVE-2020-28436 Command Injection

This affects all versions of package google-cloudstorage-commands...

7.3CVSS9.6AI score0.00936EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/25 12:00 a.m.17 views

google-cloudstorage-commands 命令注入漏洞

google-cloudstorage-commands is a set of commands for node and gcloud interactions from the individual developers at sam. A security vulnerability exists in google-cloudstorage-commands, which stems from the vulnerability of this package to command injection attacks...

9.8CVSS8.3AI score0.00936EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/07/14 12:00 a.m.20 views

Fedora: Security Advisory for restic (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/13 2:00 a.m.46 views

[SECURITY] Fedora 36 Update: restic-0.12.1-3.fc36

A backup program that is easy, fast, verifiable, secure, efficient and free. Backup destinations can be: Local SFTP REST Server Amazon S3 Minio Server OpenStack Swift Backblaze B2 Microsoft Azure Blob Storage Google Cloud Storage Other Services via rclone...

9.3CVSS2.3AI score0.0995EPSS
SaveExploits4
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.22 views

WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.2.37 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin versions = 4.2.37. Solution Update the WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage,...

3.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.31 views

WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.2.37 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin versions = 4.2.37. Solution Update the WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more...

3.1AI score
SaveExploits0References2Affected Software1
ThreatPost
ThreatPost
added 2020/05/21 12:00 p.m.59 views

Crooks Tap Google Firebase in Fresh Phishing Tactic

A series of phishing campaigns using Google Firebase storage URLs have surfaced, showing that cybercriminals continue to leverage the reputation of Google’s cloud infrastructure to dupe victims and skate by secure email gateways. Google Firebase is a mobile and web application development platfor...

7.2AI score
SaveExploits0References7
Hacker One
Hacker One
added 2020/03/29 12:30 p.m.27 views

Kubernetes: DoS for GCSArtifact.RealAll

Hi, I'm not be goot at english, if have anything don’t understand, please contact me. Thanks! Summary: attackers can control artifactName list make google storage client download large object cause denial of service. Component Version:...

7.3AI score
SaveExploits0
OSV
OSV
added 2018/12/05 5:17 p.m.11 views

GHSA-7RR7-RCJW-56VJ Exposure of Sensitive Information to an Unauthorized Actor in activestorage

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.3AI score0.01311EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2018/12/05 5:17 p.m.30 views

Exposure of Sensitive Information to an Unauthorized Actor in activestorage

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.3AI score0.01311EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/11/30 7:29 p.m.26 views

CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.6AI score
SaveExploits0References2
NVD
NVD
added 2018/11/30 7:29 p.m.29 views

CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.4AI score0.01311EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/11/30 7:29 p.m.30 views

CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.6AI score0.01311EPSS
SaveExploits1References2
Prion
Prion
added 2018/11/30 7:29 p.m.16 views

Design/Logic Flaw

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

4.3CVSS6.4AI score0.01311EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2018/11/30 7:29 p.m.12 views

DEBIAN-CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.6AI score0.01311EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/11/30 7:00 p.m.54 views

CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.3AI score0.01311EPSS
SaveExploits1References2
CVE
CVE
added 2018/11/30 7:00 p.m.119 views

CVE-2018-16477

CVE-2018-16477 describes a bypass vulnerability in Rails Active Storage (version &gt;= 5.2.0) for Google Cloud Storage and the Disk service. The issue allows an attacker to modify the content-disposition and content-type parameters, enabling inline execution of HTML files. When combined with othe...

6.5CVSS6.2AI score0.01311EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2018/11/30 7:00 p.m.62 views

CVE-2018-16477

A bypass vulnerability in Active Storage = 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the content-disposition and content-type parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as...

6.5CVSS6.6AI score0.01311EPSS
SaveExploits1
Rows per page
Query Builder