CVE-2019-13627

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7...

CVE-2019-16097:Harbor privilege elevation vulnerability alerts-a vulnerability alert-the black bar safety net

2019 9 May 19, 360CERT observed abroad security researcher Aviv Sasson found Harbor there is elevation of Privilege Vulnerability, the Harbor in the default configuration register the function is open, the attacker can register functions using the vulnerability to gain administrator privileges...

Exploit for Missing Authorization in Linuxfoundation Harbor

CVE-2019-16097 This program is intended only for security...

CVE-2017-18496

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

Gitea Remote Code Execution Vulnerability (CNVD-2019-13568)

Gitea is an open source lightweight code hosting solution. A security vulnerability exists in the models/repomirror.go file in Gitea versions prior to 1.7.6 and 1.8.x prior to 1.8-RC3. A remote attacker could exploit this vulnerability to execute code...

Letter call - open source OA office system SQL injection vulnerability

Xinhuo Co-operation Office System is an open source and cross-platform office system. A SQL injection vulnerability exists in Xinhao Collaboration Office v1.7.6, which can be exploited by attackers to obtain sensitive database information...

Letter Call - Open Source OA Office System Arbitrary File Deletion Vulnerability

Xinhuo Co-operation Office System is an open source and cross-platform office system. Xinhao Collaboration Office v1.7.6 has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

Fedora 25 : golang (2017-278f46fcd6)

Bump to 1.7.6 - Security fix for CVE-2017-8932 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

WordPress plugin Responsive Poll <= 1.7.4 - Cross-Site Scripting (XSS) & CSRF multiple vulnerabilities

WordPress plugin Responsive Poll = 1.7.4 affected by multiple vulnerabilities like Cross-Site Scripting XSS & Cross-Site Request Forgery CSRF. Lack of CSRF checks allows an unauthenticated attacker to modify polls. Also, the plugin fails to escape values put into HTML and thus makes possible for ...

X.Org libXi Denial of Service Vulnerability

X.Org libXi is an X input extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXi 1.7.6 and earlier versions, which can be exploited by an attacker to cause a denial of service out-of-bounds memory access or infinite loop...

TYPO3 Zend Framework Integration Extension Arbitrary File Access Vulnerability

TYPO3 is the Swiss TYPO3 Association maintains a set of free open source content management system framework CMS/CMF.TYPO3 Zend Framework Integration is one of the integrated Zend Framework extension plug-ins . An arbitrary file access vulnerability exists in TYPO3 Zend Framework Integration...

DEBIAN-CVE-2015-2241

Cross-site scripting XSS vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonlyfields, as demonstrated by a @property...

KubeLance 1.7.6 - Cross-Site Request Forgery (Add Admin)

----------------------------------------------------------------------------------------------- Title: KubeLance 1.7.6 Add Admin CSRF Vulnerability Author: Milos Zivanovic Email: milosz.securityatgmaildotcom Date: 02. February 2010...