PT-2020-16345 · Project Jupyter +3 · Jupyter Notebook +3

Name of the Vulnerable Software and Affected Versions: Jupyter Notebook versions prior to 6.1.5 Description: The issue is an open redirect vulnerability, where a maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically...

Ubuntu: Security Advisory (USN-4633-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the programmatically defined Cisco SD-WAN, related to incorrect restrictions on path names to the restricted access directory, allows a intruder to compromise the integrity of protected information.

The vulnerability of the programmatically defined Cisco SD-WAN network is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Vulnerability in core server (CVE-2020-25695)

Multiple features escape "security restricted operation" sandbox An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. While promptly updating PostgreSQL is the best remediation for most users, a...

PT-2020-11850 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 Description: A malicious application may be able to access restricted files due to this issue. The problem was addressed with improved entitlements. Recommendations: For versions prior to 11.0.1, update to macOS...

Axios NPM package code issue vulnerability

Axios is an HTTP client based on Promise a solution for asynchronous programming. A security vulnerability exists in the Axios NPM package version 0.21.0, which can be exploited by an attacker to be able to bypass the proxy by providing a URL that responds to a restricted host or IP address via a...

Netflix Dispatch Access Control Error Vulnerability

Netflix Dispatch is a US-based Netflix software that provides security event management with deep integration with Slack, GSuite, Jira and other tools. Netflix Dispatch suffers from an Access Control Error vulnerability that can be exploited by an attacker to view restricted events, escalate a...

CVE-2020-9300

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...

CVE-2020-9300

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...

Silver Peak Unity Orchestrator Path Traversal Vulnerability (CNVD-2020-63950)

Silver Peak Systems Silver Peak Unity Orchestrator is Silver Peak Systems' software for network management across WAN environments. The software provides a centralized way to orchestrate the network and visualize and manage network status. A path traversal vulnerability exists in Silver Peak Unit...

PT-2023-21659 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient filtering of grade report history, which allows teachers to access the names of users they could not otherwise...

PT-2023-3316 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient limitations on the start page preference in Moodle, allowing a remote attacker to set this preference for another user. This enables the attacker to gain...

premiumkey.co Cross Site Scripting vulnerability OBB-1491616

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

DEBIAN-CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

UBUNTU-CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2020-2455)

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g.,...

CVE-2020-12146

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

CVE-2020-12146

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

lab49.tuodominio.it Cross Site Scripting vulnerability OBB-1486003

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...