276 matches found
PT-2021-18385 · Hashicorp · Hashicorp Vault +1
Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions prior to 1.5.8 HashiCorp Vault and Vault Enterprise versions prior to 1.6.4 HashiCorp Vault and Vault Enterprise versions prior to 1.7.1 Description: The issue concerns the exclusion of revoked bu...
CVE-2020-29134
The TOTVS Fluig platform allows path traversal through the parameter “file = .. /” encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4 Recent assessments: lucxssouza at March 24, 2021 6:54pm UTC reported: Assessed Attacker Value: 5 Assessed Attacker Value:...
Tidwall Gjson Input Validation Error Vulnerability
Tidwall Gjson is a Go-based codebase for interacting with data in json format by Tidwall's individual developers. An input validation error vulnerability exists in GJSON before version 1.6.4. The vulnerability stems from a network system or product that does not properly validate input data, and...
PT-2020-16725
Name of the Vulnerable Software and Affected Versions: Loginizer plugin versions prior to 1.6.4 Description: The Loginizer plugin for WordPress is susceptible to SQL injection, potentially leading to cross-site scripting XSS. The issue is related to the loginizer login failed and lz valid ip...
CVE-2020-13628
Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...
Unbound DNS Resolver 1.6.4 - 1.9.4 RCE Vulnerability
Unbound DNS Resolver is prone to a remote code execution RCE vulnerability under certain conditions. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Design/Logic Flaw
If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which h...
GHSA-F5F4-M7QP-W6GC Cross-site Scripting in Jooby
Jooby before 1.6.4 has XSS via the default error handler...
CVE-2019-15477
Jooby before 1.6.4 has XSS via the default error handler...
Code execution vulnerability in zzzphp V1.6.4 backend
zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the backend of zzzphp V1.6.4, which can be exploited by attackers to gain control of the web server...
PT-2018-8863 · Debian +1 · Apt +1
Name of the Vulnerable Software and Affected Versions: Advanced Package Tool APT versions 1.6.x through 1.6.3 Advanced Package Tool APT versions 1.7.x through 1.7.0alpha2 Description: The issue concerns the mirror:// method implementation in APT, which mishandles gpg signature verification for th...
Design/Logic Flaw
Etherpad Lite before 1.6.4 is exploitable for admin access...
CVE-2018-9845
Etherpad Lite before 1.6.4 is exploitable for admin access...
Etherpad Arbitrary Code Execution Vulnerability
Etherpad is a Web-based online document collaboration tool. Multiple users can write a text document simultaneously via Etherpad and see real-time edits from all participants. An arbitrary code execution vulnerability exists in Etherpad 1.5.x and 1.6.x before 1.6.4. An attacker can exploit this...
CVE-2018-5551
Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa...
Shibboleth XMLTooling-C Information Disclosure Vulnerability
Shibboleth for Windows is the British Shibboleth company's set of Windows-based open source SAML protocol for Web single sign-on system . An information disclosure vulnerability exists in Shibboleth XMLTooling-C versions prior to 1.6.4 due to a failure of the system to properly handle a user's...
Unbound < 1.6.4 parse_edns_options Heap Buffer Overflow
According to its self-reported version number, the remote Unbound DNS resolver is affected by a heap buffer overflow in parseednsoptions. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106383; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15 20:50:21";...
Passbolt Cross-Site Scripting Vulnerability
Passbolt API is an open source team password manager. A cross-site scripting vulnerability exists in the url field of the password workspace in Passbolt API versions 1.6.4 and earlier. A remote attacker could exploit this vulnerability to execute code, alter or delete resources...
