19 matches found
NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-cloudinary versions 26.0.4...
EUVD-2019-7784
Malware in sbrugna...
EUVD-2023-38313
Malicious code in bioql PyPI...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
UBUNTU-CVE-2024-26961
In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to...
The vulnerability of the key-delete function in Moxa’s TN-4900 and TN-5900 series microprogrammable router software allows for the creation or re-write of arbitrary files within the system.
The vulnerability of the key-delete function in Moxa’s TN-4900 and TN-5900 series microprogrammable router software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to create or re-record arbitrary files within the system remotely...
CVE-2023-34216
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...
Command injection
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...
CVE-2023-34216 Second Order Command-injection Vulnerability in the Key-delete Function
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...
CVE-2023-34216 Second Order Command-injection Vulnerability in the Key-delete Function
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...
CVE-2023-34216: Improper Limitation of a Pathname to a Restricted Directory
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...
PT-2023-4623
Name of the Vulnerable Software and Affected Versions Moxa TN-4900 Series firmware versions v1.2.4 and prior Moxa TN-5900 Series firmware versions v3.3 and prior Description The issue is related to insufficient input validation in the key-delete function, which could allow malicious users to dele...
cPanel cross-site scripting vulnerability (CNVD-2019-34457)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the SSL Key Delete interface in versions of cPanel prior to 82.0.15. The...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
PT-2019-15116
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.15 Description The issue allows self XSS in the SSL Key Delete interface. Recommendations For versions prior to 82.0.15, update to version 82.0.15 or later to resolve the issue...