13122 matches found
Publify 安全漏洞
Publify is a simple but full-featured web publishing software.An information disclosure vulnerability exists in versions of Publify prior to 9.2.8. The vulnerability stems from the content of an article revealing a password in the response meta tag, which could be exploited by an attacker to view...
PT-2022-13953 · Publify · Publify
Name of the Vulnerable Software and Affected Versions: publify versions prior to 9.2.8 Description: The issue is related to improper access control in the GitHub repository, allowing attackers to view the contents of password-protected articles on the publify website. This compromises the...
SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2022:1657-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1657-1 advisory. - CVE-2022-27776: Fixed auth/cookie leak on redirect bsc1198766 - CVE-2022-27775: Fixed bad loca...
GHSA-5GWQ-4275-Q4QC Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to ha...
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
GHSA-8C4W-V65P-JVCV OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...
The vulnerability of the centralized management system of Cisco SD-WAN vManage, related to the disclosure of protected information, allows a perpetrator to gain access to this protected information.
The vulnerability of the centralized network management system Cisco SD-WAN vManage is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to gain access to protected information...
The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.
The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NTFS file system in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Windows Graphics component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Failover Cluster component for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the Remote Desktop Protocol on the Windows operating system allows a perpetrator to disclose protected information.
The vulnerability of the Remote Desktop Protocol implementation in the Windows operating system is related to the exposure of information. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...
Vulnerability of Windows operating systems related to information disclosure, which allows attackers to gain unauthorized access to protected information
Vulnerabilities of Windows operating systems are related to the exposure of information. Exploiting these vulnerabilities can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the Windows Graphics component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project...
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project...
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project...
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project...
