Cross site scripting

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

CVE-2020-5019

CVE-2020-5019 affects IBM Spectrum Protect Plus 10.1.0–10.1.6. The vulnerability is an HTTP header injection caused by improper validation of the Host header, which an attacker can exploit by sending a crafted HTTP request to inject the Host header and trigger attacks such as cross-site scripting...

IBM Spectrum Protect和IBM Spectrum Protect Plus 注入漏洞

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. An HTTP header injection vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.6. The vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-5017, CVE-2020-5018, CVE-2020-5019, CVE-2020-5020, CVE-2020-5021, CVE-2020-5022)

Summary IBM Spectrum Protect Plus is vulnerable to exposure of sensitive data, clickjacking, HTTP header injection, failure to invalidate sessions, and unauthorized access to information. Vulnerability Details CVEID: CVE-2020-5018 DESCRIPTION: IBM Spectrum Protect Plus may include sensitive...

CVE-2020-5019

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the...

Logitech: Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofing

Hello team I hope it will be a happy year for you and for me 😇 Summary: I found Host Header injection in oslo.io I tried to use it to show the security effect on users And I found this Steps To Reproduce: 1. Well, first of all, enter your project 2.Make an invitation by email 3.Now through the...

Sentrifugo 跨站脚本漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A cross-site scripting vulnerability exists in Sentrifugo version 3.2, which originates from inserting an x-forward-f...

CVE-2020-35678

A flaw was found in python-autobahn, where it allows redirect header injection. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

DEBIAN-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

UBUNTU-CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

PYSEC-2020-25

Autobahn|Python before 20.12.3 allows redirect header injection...

Design/Logic Flaw

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

CVE-2020-35678

CVE-2020-35678 affects Autobahn|Python before 20.12.3, which is vulnerable to redirect header injection. Public details in connected documents indicate the issue is addressed by upgrading to Autobahn-Python 20.12.3 or later (fixed in 20.12.3 per openSUSE/OpenObvious advisories and PyPI release no...

CVE-2020-35678

Autobahn|Python before 20.12.3 allows redirect header injection...

Security update for python3 (important)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2020:2333-1 Rating: important References: 1155094 1174091 1174571 1174701 1177211 1178009 1179193 1179630 Cross-References: CVE-2019-16935 CVE-2019-18348 CVE-2019-20907 CVE-2019-5010 CVE-2020-14422 CVE-2020-26116...