PYSEC-2021-30

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters...

Design/Logic Flaw

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters...

PYSEC-2021-29

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

OctoPrint 跨站脚本漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site request vulnerability existed prior to OctoPrint version 1.6.0. The vulnerability originated in the program because an API error message included the value of an input parameter. No...

OctoPrint 访问控制错误漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability previously existed in OctoPrint version 1.6.0. The vulnerability stemmed from the Logging subsystem in the program having incorrect access control...

requests 代码问题漏洞

requests is an elegant and simple HTTP library for humans from the Python Foundation. With requests, you can send HTTP / 1.1 requests very easily. There is no need to manually add query strings to your URLs or form-encode POST data. Requests inventory is vulnerable to a code issue that stems from...

mootools-more 安全漏洞

MooTools More is an application software. library of MooTools plug-ins and enhancements. A security vulnerability exists in MooTools More 1.6.0, which can be exploited by an attacker to inject properties into Object.Prototype...

Bento4 代码问题漏洞

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in the AP4StszAtom::GetSampleSize function in Ap4StszAtom.cpp in Bento4 v1.6.0-637 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

Joomla! 1.6.0 - 3.9.24 ACL Vulnerability

Joomla! is prone to an ACL violation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2020-4949)

Summary IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere® Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Authentication flaw

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the remove-peer raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2...

HashiCorp Vault Enterprise 授权问题漏洞

HashiCorp Vault is a private key access management tool from HashiCorp USA. An unauthorized access vulnerability exists in HashiCorp Vault Enterprise versions 1.6.0 and 1.6.1 that allows execution of the remove-peer raft operator command on the disaster recovery side without authentication. No...

PT-2020-6900 · Apache +2 · Apache Shiro +2

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.6.0 Description: The issue is related to weaknesses in the authentication procedure of the Apache Shiro framework. It may allow a remote attacker to bypass existing security restrictions by sending a specially...

CVE-2020-4043

phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution discovered, tested, and confirmed by myself, so the risk factor should be regarded as very high...

CVE-2020-4043 Phar unserialization vulnerability in phpMussel

phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution discovered, tested, and confirmed by myself, so the risk factor should be regarded as very high...

Memcached 1.6.x < 1.6.2 DoS Vulnerability

Memcached is prone to a denial of service DoS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Podman Authorization Issues Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. An authorization issue vulnerability exists in Podman version 1.6.0 that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. No detailed...

Arbitrary File Deletion Vulnerability in oyplus-cms

oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . There is an arbitrary file deletion vulnerability ...

Arbitrary File Read Vulnerability in oyplus-cms

oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . oyplus-cms 1.6.0 version of an arbitrary file read...

Arbitrary file read vulnerability exists in oyplus-cms (CNVD-2020-23776)

oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . joyplus-cms 1.6.0 version of an arbitrary file rea...