Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-29388

Malicious code in bioql PyPI...

6.6AI score
Exploits0References6
Veracode
Veracode
added 2025/06/25 5:7 a.m.4 views

Sensitive Information Disclosure

sentry-android is vulnerable to Sensitive Information Disclosure. The vulnerability is due to inadequate data masking of sensitive data appearing in Jetpack Compose text composables during Android session replays under specific configurations...

6.9AI score
Exploits0
Snyk
Snyk
added 2025/06/20 1:28 p.m.1 views

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the ComposeViewHierarchyNode object. An attacker can access unmasked sensitive data by reviewing Android session replays that include text composables. Note: This ...

8.2CVSS6.8AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/06/20 1:28 p.m.11 views

sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

6.5AI score
Exploits0References6Affected Software2
Positive Technologies
Positive Technologies
added 2025/06/20 12:0 a.m.2 views

PT-2025-27499 · Maven · Io.Sentry:Sentry-Android +1

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

8.2CVSS6.6AI score
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 2:1 a.m.8 views

CVE-2023-42442

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

8.2CVSS6.7AI score0.88166EPSS
Exploits5References1
Github Security Blog
Github Security Blog
added 2018/07/23 7:52 p.m.30 views

Directory traversal in Django

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

7.5CVSS6.4AI score0.00719EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2018/07/23 7:52 p.m.29 views

GHSA-7G9H-C88W-R7H2 Directory traversal in Django

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

9.3CVSS6.3AI score0.00719EPSS
Exploits0References11
GitLab Advisory Database
GitLab Advisory Database
added 2018/07/23 12:0 a.m.24 views

Directory traversal in Django

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

7.5CVSS6.3AI score0.00719EPSS
Exploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/07/07 12:0 a.m.16 views

Rockwell Automation MicroLogix 1100 PLC < Series B FRN 12.0 MitM Replay Authentication Bypass

Binary data scadarockwellmicrologix1100plcmitm470156.nbin...

9.3CVSS7.3AI score0.0055EPSS
Exploits0References3
NVD
NVD
added 2011/02/14 9:0 p.m.14 views

CVE-2011-0698

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

7.5CVSS6.6AI score0.00719EPSS
Exploits0References7
Prion
Prion
added 2011/02/14 9:0 p.m.18 views

Directory traversal

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

7.5CVSS7.2AI score0.00719EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder