UBUNTU-CVE-2020-29565

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provid...

PYSEC-2020-45

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provid...

CVE-2020-29565

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provid...

CVE-2020-29565: URL Redirection to Untrusted Site

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provid...

An End-to-End Approach to Next-Gen Web Application and API Security

It was almost 10 years ago that Marc Andreessen wrote that software is eating the world. It is still true today, but I would be even more specific and say that web applications and APIs are eating the world. Our businesses run on web apps and APIs, and their ubiquity means that securing them has...

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

An out-of-bounds write vulnerability was discovered in tcpdump while reading the file passed to the -V option of the command line program. An attacker may abuse this flaw by tricking a victim user into using a malicious file with the -V option, which would make the program read one byte before a...

PT-2025-8810

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0 Description A use-after-free bug was found in the Linux kernel, specifically in the padata reorder function. This issue can be triggered when the padata find next function is called after the pd object has...

RUSTSEC-2020-0053 dirs is unmaintained, use dirs-next instead

The dirs crate is not maintained any more; use dirs-next instead...

directories is unmaintained, use directories-next instead

The directories crate is not maintained any more; use directories-next instead...

dirs is unmaintained, use dirs-next instead

The dirs crate is not maintained any more; use dirs-next instead...

PT-2020-22684

Name of the Vulnerable Software and Affected Versions dirs crate affected versions not specified Description The issue concerns the dirs crate, which is no longer maintained. Users are advised to use dirs-next instead. Recommendations At the moment, there is no information about a newer version...

@blitzjs/server (>=0.16.5-canary.8, <=0.24.1), @brudi-toolbox/next (>=1.14.17-next.2, <=1.14.26) +32 more potentially affected by CVE-2020-15242 via next (>=9.5.0, <=9.5.4-canary.24)

next NPM version =9.5.0, =0.16.5-canary.8, =1.14.17-next.2, =1.13.4, =0.1.8-alpha.1, =0.0.1-1, =0.16.0, =0.31.0-RC.1, =1.10.8, =1.0.0-alpha.1, =1.0.0-alpha.0, =0.16.5-canary.8, =0.20.0 - cna-template-material-tailwindcss-reduxtoolkit 0.1.0 and more Source cves: CVE-2020-15242 Source advisory:...

nextdayscience.com Cross Site Scripting vulnerability OBB-1379860

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-22043

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the asn1 get next function, which is called by x509 parse...

Dnxfirewall - A Pure Python Next Generation Firewall Built On Top Of Linux Kernel/Netfilter

DNX Firewall is an optimized/high performance collection of applications or services to convert a standard linux system into a zone based next generation firewall. All software is designed to run in conjunction with eachother, but with a modular design certain aspects can be completely removed wi...

Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are generally safe to execute. Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call is to be allowe...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +108 more potentially affected by unknown CVE via next (>=1.2.3, <=5.0.1-canary.14)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.1, =3.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =1.0.2, =0.0.1, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VJ8-3V2H-H38V...

Remote Code Execution in next

Versions of next prior to 5.1.0 are vulnerable to Remote Code Execution. The /path: route fails to properly sanitize input and passes it to a require call. This allows attackers to execute JavaScript code on the server. Note that prior version 0.9.9 package next npm package hosted a different...

GHSA-5VJ8-3V2H-H38V Remote Code Execution in next

Versions of next prior to 5.1.0 are vulnerable to Remote Code Execution. The /path: route fails to properly sanitize input and passes it to a require call. This allows attackers to execute JavaScript code on the server. Note that prior version 0.9.9 package next npm package hosted a different...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +108 more potentially affected by unknown CVE via next (>=1.2.3, <=5.0.1-canary.14)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.1, =3.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =1.0.2, =0.0.1, =0.1.10 and more Source cves: unknown CVE Source advisory: GHSA-5VJ8-3V2H-H38V...