4723 matches found
DEBIAN-CVE-2020-25864
HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value KV raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14...
CVE-2020-25864
HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value KV raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14...
CVE-2020-25864: Improper Neutralization of Input During Web Page Generation
HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value KV raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14...
Consul API KV Endpoint Vulnerable to Cross-Site Scripting
Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that a specially crafted key-value entry could be used to perform a cross-site scripting XSS attack when viewed in Consul KV API’s raw mode. This vulnerability, CVE-2020-25864, affects all Consul versions up to...
Microsoft Windows Raw Image Extension CR3 File Parsing Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Raw Image Extension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
GHSA-PGHF-347X-C2GJ SQL Injection via in django-debug-toolbar
Impact With Django Debug Toolbar attackers are able to execute SQL by changing the rawsql input of the SQL explain, analyze or select forms and submitting the form. NOTE: This is a high severity issue for anyone using the toolbar in a production environment. Generally the Django Debug Toolbar tea...
Consul -- Multiple vulnerabilities
Hashicorp reports: Add content-type headers to raw KV responses to prevent XSS attacks CVE-2020-25864. audit-logging: Parse endpoint URL to prevent requests from bypassing the audit log CVE-2021-28156...
PYSEC-2021-10
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...
CVE-2021-28468
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-28466
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-28466
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-28468
Raw Image Extension Remote Code Execution Vulnerability...
Remote code execution
Raw Image Extension Remote Code Execution Vulnerability...
Remote code execution
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-28468
CVE-2021-28468 affects the Windows Raw Image Extensions/Codecs Library component. The issue is described as a remote code execution vulnerability in Microsoft’s Raw Image Extension, stemming from parsing of crafted image/file inputs that can lead to arbitrary code execution on the affected system...
CVE-2021-28468 Raw Image Extension Remote Code Execution Vulnerability
...
CVE-2021-28466
CVE-2021-28466 is a Raw Image Extension RCE affecting Windows Raw Image Extensions. Public docs attribute the root cause to incorrect code-generation management in the Raw Image Extension component, enabling arbitrary code execution when processing specially crafted content. Exploitation paths ar...
CVE-2021-28466 Raw Image Extension Remote Code Execution Vulnerability
...
