CSRF Vulnerability in polaris-website

Impact CSRF vulnerability: In some very specific circumstances, an attacker would be able to update your settings. Basically you would need to navigate to hackersite.com while logged into our panel. Then they could modify your settings. They couldn't check if it worked, nor could they read your...

PT-2020-21558

Name of the Vulnerable Software and Affected Versions Polaris-React versions prior to 1.1.1 Description A CSRF vulnerability allows an attacker to update user settings under specific circumstances. The attacker would need the user to navigate to a malicious site while logged into the panel. The...

react-native-fast-image information disclosure vulnerability

react-native-fast-image is an image loading and processing package by Canadian software developer Dylan Vann. An information disclosure vulnerability exists in react-native-fast-image, which can be exploited by an attacker to cause signature credentials or other session tokens to be disclosed to...

openSUSE Security Update : SUSE Manager Client Tools (openSUSE-2020-1105)

This update fixes the following issues : dracut-saltboot : - Print a list of available disk devices bsc1170824 - Install wipefs to initrd - Force install crypt modules golang-github-prometheus-prometheus : - Update change log and spec file + Modified spec file: default to golang 1.14 to avoid 'ha...

@ada-support/react-native-sdk (>=0.0.1, <=0.0.8), @adadapted/react-native-sdk (>=1.0.0, <=2.0.0) +319 more potentially affected by CVE-2020-6506 via react-native-webview (>=2.8.0, <=10.10.2)

react-native-webview NPM version =2.8.0, =0.0.1, =1.0.0, =0.1.0, =5.2.0, =11.0.0-alpha.0, =1.0.0, =0.13.0, =1.0.0, =4.6.201906191752-test, =2.37.1, =0.2.3, =0.2.23 and more Source cves: CVE-2020-6506 Source advisory: MEND:CVE-2020-6506...

CVE-2020-7696

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

CVE-2020-7696

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

Authorization

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

CVE-2020-7696

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

CVE-2020-7696 Information Exposure

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

CVE-2020-7696

The CVE-2020-7696 entry affects all versions of react-native-fast-image. When an image is loaded with headers that include sensitive data (e.g., host and authorization in the request headers), subsequent images reuse those headers, causing potential leakage of signing credentials or session token...

@agungkes/react-native-scalable-image (>=1.0.1, <=1.0.2), @applicaster/zapp-react-native-fast-image (>=1.0.0, <=1.1.0-beta.0) +34 more potentially affected by CVE-2020-7696 via react-native-fast-image (>=4.0.14, <=8.2.0)

react-native-fast-image NPM version =4.0.14, =1.0.1, =1.0.0, =1.8.20, =1.0.21, =0.0.8, =0.0.8, =0.0.1, =0.0.1, =0.10.25, =1.0.113, =1.0.0, =1.0.3 and more Source cves: CVE-2020-7696 Source advisory: MEND:CVE-2020-7696...

CVE-2020-7696

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

CVE-2020-7696: Exposure of Sensitive Information to an Unauthorized Actor

This affects all versions of package react-native-fast-image. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will use the same headers, this can lead to signing credentials or other session tokens being leaked to...

PT-2020-19719

Name of the Vulnerable Software and Affected Versions react-native-fast-image versions prior to 8.3.0 Description The issue arises when an image is loaded with a source that includes headers, such as host and authorization. This causes all subsequent images to use the same headers, potentially...

Information Exposure

Overview react-native-fast-image is a FastImage, performant React Native image component. Affected versions of this package are vulnerable to Information Exposure. When an image with source=uri: "...", headers: host: "somehost.com", authorization: "..." is loaded, all other subsequent images will...

@applicaster/zapp-react-native-fast-image (>=1.0.0, <=1.1.0-beta.0), @momo-platform/component-kits (1.1.74) +5 more potentially affected by CVE-2020-7696 via react-native-fast-image (>=8.1.2, <=8.2.0)

react-native-fast-image NPM version =8.1.2, =1.0.0, =0.0.1, =0.1.0, =1.2.23 Source cves: CVE-2020-7696 Source advisory: SNYK:JS-REACTNATIVEFASTIMAGE-572228...

app.io (>=0.0.1, <=0.0.4), feathers-validation (>=0.5.0, <=0.5.1) +6 more potentially affected by CVE-2019-10781 via schema-inspector (>=1.4.2, <=1.6.8)

schema-inspector NPM version =1.4.2, =0.0.1, =0.5.0, =3.8.1, =1.0.2, =1.0.0, =0.2.0, =0.5.0 Source cves: CVE-2019-10781 Source advisory: GHSA-R24H-634P-M72X...

WatermelonDB SQL Injection Vulnerability

WatermelonDB is the next generation React database for building powerful React and React Native applications that can scale from hundreds to tens of thousands of records while remaining fast. A SQL injection vulnerability in WatermelonDB versions prior to 0.15.1 and prior to 0.16.2, which stems...

form-validator (0.0.11), heightline (1.0.1) +4 more potentially affected by CVE-2020-11022 via jquery (1.6.2)

jquery NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jquery and may be impacted: - form-validator 0.0.11 - heightline 1.0.1 - jsgrep =1.0.0, =0.1.61, =0.0.9, =0.0.15 - zappa 0.2.0 Source cves: CVE-2020-11022 Source advisory:...