Lucene search
+L

13825 matches found

Github Security Blog
Github Security Blog
added 2019/03/13 5:26 p.m.65 views

Path Traversal in Action View

File Content Disclosure in Action View Impact ------ There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to render file: can cause arbitrary files on the target server to be rendered, disclosing the file contents. Th...

7.5CVSS7.2AI score0.98507EPSS
SaveExploits18References19Affected Software1
RubySec
RubySec
added 2019/03/13 12:00 a.m.35 views

File Content Disclosure in Action View

There is a possible file content disclosure vulnerability in Action View. This vulnerability has been assigned the CVE identifier CVE-2019-5418. Versions Affected: All. Not affected: None. Fixed Versions: 6.0.0.beta3, 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 Impact ------ There is a possible file...

7.5CVSS0.8AI score0.98507EPSS
SaveExploits18References1Affected Software1
OpenVAS
OpenVAS
added 2019/03/12 12:00 a.m.275 views

Fedora Update for kernel-headers FEDORA-2019-196ab64d65

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/03/12 12:00 a.m.46 views

Fedora 28 : kernel / kernel-headers (2019-196ab64d65)

The 4.20.14 stable kernel update contains a number of important fixes across the tree. ---- The 4.20.13 stable kernel update contains a number of important fixes across the tree. ---- The 4.20.12 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network...

7.8CVSS6.4AI score0.05845EPSS
SaveExploits10References4
Fedora
Fedora
added 2019/03/11 8:20 p.m.44 views

[SECURITY] Fedora 28 Update: kernel-headers-4.20.14-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.05845EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
added 2019/03/11 12:00 a.m.33 views

Fedora 29 : kernel / kernel-headers (2019-87e7046631)

The 4.20.14 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

5.5CVSS6.6AI score0.05667EPSS
SaveExploits7References2
Fedora
Fedora
added 2019/03/10 6:25 p.m.54 views

[SECURITY] Fedora 29 Update: kernel-headers-4.20.14-200.fc29

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

5.5CVSS2.8AI score0.05667EPSS
SaveExploits7
Positive Technologies
Positive Technologies
added 2019/03/09 12:00 a.m.26 views

PT-2019-17836 · Node.Js +7 · Node.Js +7

Name of the Vulnerable Software and Affected Versions: Node.js versions 6.x before 6.17.0 Node.js versions 8.x before 8.15.1 Node.js versions 10.x before 10.15.2 Node.js versions 11.x before 11.10.1 Description: An attacker can cause a Denial of Service DoS by establishing an HTTP or HTTPS...

9.8CVSS7.8AI score0.95707EPSS
SaveExploits50References604
NVD
NVD
added 2019/03/07 6:29 p.m.27 views

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS7.3AI score0.01869EPSS
SaveExploits0References2
Prion
Prion
added 2019/03/07 6:29 p.m.23 views

Cross site request forgery (csrf)

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

5CVSS7.4AI score0.01869EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/03/07 6:29 p.m.20 views

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS6.5AI score
SaveExploits0References2
OSV
OSV
added 2019/03/07 6:29 p.m.4 views

DEBIAN-CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS6.8AI score0.01869EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/03/07 6:29 p.m.23 views

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS7.1AI score0.01869EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/07 6:29 p.m.7 views

UBUNTU-CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS5.8AI score0.01869EPSS
SaveExploits0References4
CVE
CVE
added 2019/03/07 6:00 p.m.101 views

CVE-2018-11783

CVE-2018-11783 affects the Apache Traffic Server sslheaders plugin. The plugin “extracts information from the client certificate and sets headers in the request based on the configuration,” and in some scenarios does not strip those headers from the request. This creates information exposure as h...

7.5CVSS7.2AI score0.01869EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/07 6:00 p.m.36 views

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.3AI score0.01869EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/03/07 6:00 p.m.61 views

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 t...

7.5CVSS7.4AI score0.01869EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/03/05 12:00 a.m.70 views

FreeBSD : py-gunicorn -- CWE-113 vulnerability (a3e24de7-3f0c-11e9-87d1-00012e582166)

Everardo reports : gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in processheaders function in gunicorn/http/wsgi.py that can result in an attacker causing the server to return arbitrary HTTP headers. C Tenable Network Security...

7.5CVSS7.4AI score0.02414EPSS
SaveExploits1References3
Fedora
Fedora
added 2019/03/01 2:41 a.m.43 views

[SECURITY] Fedora 29 Update: kernel-headers-4.20.12-200.fc29

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.05845EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2019/03/01 12:00 a.m.53 views

Fedora 29 : kernel / kernel-headers (2019-7462acf8ba)

The 4.20.12 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

7.8CVSS6.3AI score0.05845EPSS
SaveExploits3References3
Rows per page
Query Builder