9020 matches found
Workflow rules only check the file extension for the mimetype instead of the content (NC-SA-2020-002)
A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes...
Integrate Security Testing with GitHub Actions
GitHub Actions GitHub announced their own CI/CD system which is integrated into the user interface and called Github Actions. We added RIPS to the GitHub marketplace which enables you to integrate our leading code analysis directly into your GitHub workflow. It works as a security gateway and fai...
datamorph-workflow-generator (0.0.2), i2b2-import (>=0.0.1, <=1.5.34) +1 more potentially affected by CVE-2019-12417 via airflow (0.6.0)
airflow PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on airflow and may be impacted: - datamorph-workflow-generator 0.0.2 - i2b2-import =0.0.1, =1.5.34 - pandasdb 0.0.10 Source cves: CVE-2019-12417 Source advisory:...
From Thousands of Security Alerts to a Handful of Insights
Understanding an attacker’s workflow and how Attack Analytics hunts them down In recent years we’ve seen a significant increase in the number and complexity of cyber-attacks. The accessibility of public tools and their automation capabilities, as well as distributed and anonymization features tha...
WS-2019-0612
In Axelor Open-Suite, versions v5.0.0-rc1 through v5.1.11 are vulnerable to XML External Entity Reference XXE, due to XXE processing not disabled when parsing a BPM workflow file. A privileged attacker can upload a specially crafted XML file and trigger DoS and in some cases even RCE...
DEBIAN-CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
Code injection
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
CVE-2010-5108: Incorrect Default Permissions
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...
PT-2019-6596
Name of the Vulnerable Software and Affected Versions Trac version 0.11.6 Description The issue allows an attacker to modify a ticket's status and resolution without proper permissions due to inadequate workflow permission checks. Recommendations For Trac version 0.11.6, update to a newer version...
openstack-mistral information disclosure vulnerability
openstack-mistral is a workflow service for the OpenStack cloud. The product focuses on providing mechanisms for managing and executing tasks/workflows without the need to code, manage and execute them in a cloud environment. An information disclosure vulnerability exists in openstack-mistral,...
Oracle Workflow Worklist Privilege Escalation
The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain...
Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US
Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...
CVE-2013-1930
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...