CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...

CVE-2013-2166

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

PYSEC-2019-197

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

PYSEC-2019-161

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

Privilege escalation

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

PYSEC-2019-161

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2166

The CVE-2013-2166 entry concerns python-keystoneclient versions 0.2.3 to 0.2.5, where the middleware memcache encryption bypass is documented. Multiple connected records (GHSA-C3XQ-CJ8F-7829 and OSV entries) confirm the same issue and reference advisories like RHSA-2013:0992. The vulnerability ce...

The vulnerability of the Services subcomponent of the Oracle Forms component in the Oracle Fusion Middleware software platform allows a malicious individual to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Services sub-component of the Oracle Forms component of the Oracle Fusion Middleware software platform is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or...

DEBIAN-CVE-2019-18978

An issue was discovered in the rack-cors aka Rack CORS Middleware gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...

CVE-2019-18978

An issue was discovered in the rack-cors aka Rack CORS Middleware gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...

Directory traversal

An issue was discovered in the rack-cors aka Rack CORS Middleware gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software, specifically within the Oracle Fusion Middleware software platform, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software component of the Oracle Fusion Middleware platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Mobile Service sub-component of the BI Publisher (formerly XML Publisher) software platform from Oracle Fusion Middleware allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Mobile Service sub-component of the BI Publisher formerly XML Publisher software platform from Oracle Fusion Middleware is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the ADF Faces sub-component of the Oracle JDeveloper component and the ADF software platform of Oracle Fusion Middleware allows a perpetrator to gain full control over the application.

The vulnerability of the ADF Faces sub-component of the Oracle JDeveloper component and the ADF software platform of Oracle Fusion Middleware is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the...