PT-2021-11059

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns an authenticated SQL injection vulnerability. This means that an attacker who has valid credentials can potentially inject malicious SQL code to manipulate...

PT-2021-11055

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns a stored XSS vulnerability. This vulnerability was fixed in version 6.3.0.03. Recommendations: For versions prior to 6.3.0.03, update to version 6.3.0.03 o...

CVE-2020-24671: Improper Neutralization of Special Elements used in an SQL Command

Trace Financial CRESTBridge 6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03...

CVE-2020-24667: Improper Neutralization of Special Elements used in an SQL Command

Trace Financial CRESTBridge 6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03...

CVE-2020-24663: Improper Neutralization of Input During Web Page Generation

Trace Financial CRESTBridge 6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03...

Trace Financial Crest Bridge Cross-site Scripting Vulnerabilities

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A cross-site scripting vulnerability exists in Trace Financial Crest Bridge, which can be exploited by attackers to execute client-side code...

Trace Financial CRESTBridge cross-site scripting vulnerability

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A cross-site scripting vulnerability exists in Trace Financial CRESTBridge, which can be exploited by attackers to execute client-side code...

Trace Financial CRESTBridge SQL Injection Vulnerability

CRESTBridge is a resilient, feature-rich interface for Trace Financial.Trace Financial CRESTBridge is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands...

Trace Financial CRESTBridge SQL Injection Vulnerability

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A SQL injection vulnerability exists in Trace Financial CRESTBridge versions prior to 6.3.0.02, which stems from a lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

Design/Logic Flaw

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the trace logging level, exposing sensitive information. Affected product: Broadcom/Brocade SANnav prior to 2.1.1. Root cause: verbose logging of credentials. Impact: credential exposure risk; no exploitation details are provided in ...

PT-2021-9760

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.1 Description The issue concerns the logging of account credentials at the 'trace' logging level. This could potentially expose sensitive information. Recommendations For versions prior to 2.1.1, update to...

SUSE: Security Advisory (SUSE-SU-2018:1784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2021-89

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

CVE-2021-32670

Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...

PT-2021-19845

Name of the Vulnerable Software and Affected Versions Datasette versions prior to 0.56.1 Datasette versions prior to 0.57 Description The ? trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting issue. This is particularly...

Datasette cross-site scripting vulnerabilities

Datasette is an open source multifunctional tool used by applications to explore and publish data. A cross-site scripting vulnerability exists in Datasette 0.57 and 0.56.1 that ? trace=1 input validation error. No detailed vulnerability details are provided at this time...

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2021-38672)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...