LibreHealth EHR File Upload Vulnerability

LibreHealth EHR is a free and open source electronic health record and medical practice management application. LibreHealth EHR 2.0.0 contains a file upload vulnerability that could be exploited by attackers to achieve remote code execution RCE on a hosted web server by uploading a maliciously...

CVE-2020-5777

MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting maxconnections default 151 is lower than Apache or...

GHSA-M4VV-P6FQ-JHQP Directory Traversal in @vivaxy/here

The @vivaxy/here module is a small web server that serves files with the process' working directory acting as the web root. It is vulnerable to a directory traversal attack. This means that files on the local file system which exist outside of the web root may be disclosed to an attacker. This...

Directory Traversal in @vivaxy/here

The @vivaxy/here module is a small web server that serves files with the process' working directory acting as the web root. It is vulnerable to a directory traversal attack. This means that files on the local file system which exist outside of the web root may be disclosed to an attacker. This...

Bagisto Credential Disclosure

Vendor: Bagisto https://bagisto.com/ Affected version: All Introduction: Bagisto is an open source shop system based on PHP and Laravel framework Vulnerability description: Bagisto can be installed in sub-directories below the document root exposing the Laravel .env file which includes database a...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +1653 more potentially affected by CVE-2013-7370 via connect (>=2.0.0, <=2.8.0)

connect NPM version =2.0.0, =0.0.1, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.3, =0.0.5, =1.0.39 and more Source cves: CVE-2013-7370 Source advisory: OSV:GHSA-3FW8-66WF-PR7M...

[SECURITY] Fedora 32 Update: httpd-2.4.46-1.fc32

The Apache HTTP Server is a powerful, efficient, and extensible web server...

[SECURITY] Fedora 32 Update: jetty-9.4.31-2.fc32

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in ord er to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

Design/Logic Flaw

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

The vulnerability of HTTP servers for Ruby/Rack applications, Puma, relates to deficiencies in HTTP request processing, allowing attackers to influence the integrity of information.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influence the integrity of information...

The vulnerability of the Apache web server relates to improper input validation during page generation, allowing attackers to compromise data integrity.

The vulnerability of the Apache web server is related to improper input validation during the generation of web pages when attempts are made to access resources that violate privilege restrictions. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Debian DSA-4750-1 : nginx - security update

It was reported that the Lua module for Nginx, a high-performance web and reverse proxy server, is prone to a HTTP request smuggling vulnerability. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4750. The te...

Joomla 2.5.x < 3.9.21 Multiple Vulnerabilities (5821-joomla-3-9-21)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows XSS attacks. CVE-2020-24599 - Lack of input validation in comcontent lea...

The vulnerability of the SSH/Telnet protocol implementations in NPort IAW5000A-I/O Series web server software allows a hacker to bypass security restrictions.

The vulnerability of the SSH/Telnet protocol implementations in NPort IAW5000A-I/O Series web servers is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the NPort IAW5000A-I/O Series web server software lies in its lack of access control mechanisms, allowing attackers to send arbitrary requests to the vulnerable system.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the vulnerable system remotely...

The software vulnerabilities of the NPort IAW5000A-I/O Series web servers, related to weak password requirements, allow attackers to compromise user credentials.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise user credentials remotely...

The vulnerability of the NPort IAW5000A-I/O Series web server software lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Google Researcher Reported 3 Flaws in Apache Web Server Software

If your web-server runs on Apache, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it. Apache recently fixed multiple vulnerabilities in its web server software that could have potentially led to the...

Google Researcher Reported 3 Flaws in Apache Web Server Software

If your web-server runs on Apache, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it. Apache recently fixed multiple vulnerabilities in its web server software that could have potentially led to the...