The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Apache Struts 代码注入漏洞

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2. ...

PT-2022-19326

Name of the Vulnerable Software and Affected Versions Spip Web Framework versions v3.1.13 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the /spip.php component of Spip Web Framework. This allows attackers to execute arbitrary web scripts or HTML...

PYSEC-2020-157

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

JetBrains Ktor framework 环境问题漏洞

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor versions prior to 1.4.1, which stems from HTTP request entrapment attacks are possible. No detailed vulnerability details are provided at this time...

Code Execution Vulnerability in Zibo's New X1.0 System

Zibo's new X1.0 system is a website management system based on the latest thinkphp5 framework. A code execution vulnerability exists in Qibo New X1.0 System. An attacker can exploit this vulnerability to gain server privileges...

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ZEIT Next.js Input Validation Error Vulnerability

ZEIT Next.js is a ZEIT company based on Vue.js, Node.js, Webpack and Babel.js open source Web application framework. An input validation error vulnerability exists in ZEIT Next.js. The vulnerability stems from a web system or product that does not properly validate input data. No detailed...

CVE-2020-2287

Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target URL...

CVE-2020-2287

Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target URL...

[SECURITY] Fedora 33 Update: rubygem-rails-6.0.3.3-1.fc33

Ruby on Rails is a full-stack web framework optimized for programmer happin ess and sustainable productivity. It encourages beautiful code by favoring convention over configuration...

Fedora: Security Advisory for rubygem-rails (FEDORA-2020-4dd34860a3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-15230

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4...

CVE-2020-15230

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4...

Design/Logic Flaw

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4...

CVE-2020-15230

Vapor (Swift) vulnerable before 4.29.4 when using FileMiddleware: attackers can read arbitrary files on the same host via path traversal/percent-encoded relative paths, leading to data disclosure. Impact is data exposure with HIGH confidentiality impact per CVSS in sources. Fixed in Vapor 4.29.4;...

CVE-2020-15230 Arbitrary file read un Vapor

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4...

Fedora: Security Advisory for python-django (FEDORA-2020-9c6b391162)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: python-django-3.0.10-3.fc33

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...