Design/Logic Flaw

Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted...

Linux kernel buffer overflow vulnerability (CNVD-2019-42786)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product that performs operations in memory without properl...

Linux kernel buffer overflow vulnerability (CNVD-2019-42785)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product that performs operations in memory without properl...

TYPO3 SQL Injection Vulnerability (CNVD-2019-47027)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A SQL injection vulnerability exists in Typo3 versions 4.5.0 through 4.5.5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

DEBIAN-CVE-2019-18888

An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...

UBUNTU-CVE-2019-18888

An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...

Metinfo SQL Injection Vulnerability (CNVD-2019-42846)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this...

sid.uncu.edu.ar Open Redirect vulnerability

Open Bug Bounty ID: OBB-1016602 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting sid.uncu.edu.ar website and its users. Following coordinat...

onlinejets.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015507 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting onlinejets.org website and its users. Following coordinate...

TYPO3 cross-site scripting vulnerability (CNVD-2019-41224)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. The vulnerability stems from a lack of proper validation of...

Taxonomy CSV import/export - Moderately critical - Information disclosure - SA-CONTRIB-2019-084

Updated January 9th, 2020 This module enables you to import taxonomy terms from different sources, including a text area, a file upload or a file present in the web server. The module doesn't sufficiently validate user input when providing a local filename to import. This vulnerability is mitigat...

clk.omgt5.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015398 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

explorelocalbox.cratejoy.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015288 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting explorelocalbox.cratejoy.com website and its users...

fa3.in Open Redirect vulnerability

Open Bug Bounty ID: OBB-1013972 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting fa3.in website and its users. Following coordinated and...

Linux kernel buffer overflow vulnerability (CNVD-2019-42727)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the kernel/compat.c file in versions of Linux kernel prior to 3.17 used in Google Chrome OS and other products. The...

CVE-2019-2325

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150...

CVE-2019-2325

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150...

Mail.ru: Open Redirect

Hello Team Mail.ru Open Redirect on http://aw.mail.ru/ There is an Open Redirect on http://aw.mail.ru/dynamic/auth/?forumreg= due to the application not checking the value passed by the user to the "forumreg" parameter. User can be redirect to malicious site PoC: Open Redirect...

DedeCMS backend has SQL injection vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the backend of DedeCMS. The vulnerability stems from the lack of validation of externally entered SQL statements in the database-based application, which can be exploite...

pixelpost SQL injection vulnerability (CNVD-2019-39945)

pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A SQL injection vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of validation of externally-entered SQL statements in the database-based application and can be exploited by an...