3131 matches found
CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the urlblocker.rb which could result in SSRF where the library is utilized...
CVE-2019-5464
CVE-2019-5464 affects GitLab CE/EE 10.2 and later due to a flawed DNS rebinding protection in lib/gitlab/url_blocker.rb, which can result in SSRF when the library is used. The issue can allow an attacker to trigger requests to the local/internal network (e.g., via webhooks), with high impact (net...
CVE-2019-5464
Removed by vendor...
PT-2020-11134
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.2 and later Description A flawed DNS rebinding protection issue was discovered in the url blocker.rb library, which could result in Server-Side Request Forgery SSRF where the library is utilized. Recommendations For...
CVE-2019-5464: Improper Input Validation
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the urlblocker.rb which could result in SSRF where the library is utilized...
PT-2021-2514
Name of the Vulnerable Software and Affected Versions Node.js versions prior to 10.24.0 Node.js versions prior to 12.21.0 Node.js versions prior to 14.16.0 Node.js versions prior to 15.10.0 Description The issue is related to the presence of localhost6 in the whitelist, which can be exploited by ...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-1081)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2018-1079)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.
The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...
CVE-2019-19495
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...
CVE-2019-19495
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...
Code injection
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...
CVE-2019-19495
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...
CVE-2019-19495
The CVE-2019-19495 entry concerns the Technicolor TC7230 STEB 01.25 web interface. It describes a DNS rebinding vulnerability that allows a remote attacker, via JavaScript in a victim’s browser, to reconfigure the cable modem and enable port-forwarding of the internal TELNET server, potentially g...
CVE-2019-19495: Improper Input Validation
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...
GitLab Code Issue Vulnerability (CNVD-2020-03032)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise...
OpenLambda has an unspecified vulnerability
OpenLambda is an open source serverless computing platform written in the Go language. A security vulnerability exists in the 2019-09-10 release of OpenLambda. An attacker can exploit the vulnerability to perform a DNS rebinding attack on OL servers...
CVE-2019-20329
OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...