CVE-2019-16302

An issue was discovered in Open Network Operating System ONOS 1.14. In the Ethernet VPN application org.onosproject.evpnopenflow, the host event listener does not handle the following event types: HOSTMOVED, HOSTUPDATED. In combination with other applications, this could lead to the absence of...

CVE-2019-16298

An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual broadband network gateway application org.onosproject.virtualbng, the host event listener does not handle the following event types: HOSTMOVED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this...

CVE-2019-16297

An issue was discovered in Open Network Operating System ONOS 1.14. In the P4 tutorial application org.onosproject.p4tutorial, the host event listener does not handle the following event types: HOSTMOVED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this could lead to the...

PT-2020-9810

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the P4 tutorial application where the host event listener does not handle certain event types, including HOST MOVED, HOST REMOVED, and HOST UPDATED. This...

PT-2020-9815

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the Ethernet VPN application, specifically in the host event listener, which does not handle the event types HOST MOVED and HOST UPDATED. This could lead to...

PT-2020-9811

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the virtual broadband network gateway application, specifically in the host event listener, which does not handle certain event types, including HOST MOVED,...

PT-2020-9814

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the virtual tenant network application org.onosproject.vtn where the host event listener does not handle the HOST MOVED event type. This could lead to the...

PT-2019-6800

Name of the Vulnerable Software and Affected Versions libuser affected versions not specified Description The issue is related to information disclosure when the user's home directory is moved. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

JDK: Failure to privatize a value pulled out of the loop by versioning

All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...

RUSTSEC-2018-0003 Possible double free during unwinding in SmallVec::insert_many

If an iterator passed to SmallVec::insertmany panicked in Iterator::next, destructors were run during unwinding while the vector was in an inconsistent state, possibly causing a double free a destructor running on two copies of the same value. This is fixed in smallvec 0.6.3 by ensuring that the...

Uber: XSS in uber oauth

Hi , I have found that when setting a redirecturi for an application you validate for the presence of :// in the beginning of the url , but you don't validate for the protocol and you don't block malicious protocols such as javascript: pseudo protocol and data: URIs. Although the redirecting is...

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

optee_os

OP-TEE Trusted OS This git contains sou...

RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit

Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...

CVE-2002-0075: Undefined Security Weakness

Cross-site scripting vulnerability for Internet Information Server IIS 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect ""302 Object Moved" message...

CVE-2001-1406: Undefined Security Weakness

processbug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent...