OWASP Zed Attack Proxy 信任管理问题漏洞

OWASP Zed Attack Proxy ZAP is an open source web application security scanner from the OWASP Foundation in the United States. It is intended for use by people new to application security as well as professional penetration testers. A trust management issue vulnerability exists in the w2022-03-21...

GHSA-X7VR-C387-8W57 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-X7VR-C387-8W57 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-6RHX-HQXM-8P36 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-6RHX-HQXM-8P36 vulnerabilities

Vulnerabilities for packages: zed...

CVE-2019-25009 vulnerabilities

Vulnerabilities for packages: zed...

CVE-2019-25009 vulnerabilities

Vulnerabilities for packages: zed...

CVE-2020-25574 vulnerabilities

Vulnerabilities for packages: zed...

CVE-2020-25574 vulnerabilities

Vulnerabilities for packages: zed...

CVE-2019-7312

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows ANSSI qualification submission before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac...

CVE-2019-7312

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows ANSSI qualification submission before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac...

Code injection

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows ANSSI qualification submission before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac...

CVE-2019-7312

CVE-2019-7312 describes a limited plaintext disclosure in PRIMX Zed Entreprise products (Windows, Mac, Linux) and related Zed Pro/Free lines, before the listed build numbers: Windows <6.1.2240 or ANSSI submission <6.1.2150; Mac/Linux <2.0.199; Pro/Free

CVE-2019-7312

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows ANSSI qualification submission before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac...

com.consol.citrus:citrus-camel (=2.2), com.github.oscerd:camel-cassandra (>=1.0.0 <=1.1.0) +390 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (>=2.14.0 <=2.14.1)

org.apache.camel:camel-core MAVEN version =2.14.0, =1.0.0, =0.0.13, =0.0.9, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.4 and more Source cves: CVE-2015-0264 Source advisory: OSV:GHSA-MHX2-R3JX-G94C...

com.consol.citrus:citrus-camel (=2.2), com.github.oscerd:camel-cassandra (>=1.0.0 <=1.1.0) +390 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (>=2.14.0 <=2.14.1)

org.apache.camel:camel-core MAVEN version =2.14.0, =1.0.0, =0.0.13, =0.0.9, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.4 and more Source cves: CVE-2015-0263 Source advisory: OSV:GHSA-3HRC-F439-727G...

Directory traversal

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...

CVE-2018-16518

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...

CVE-2018-16518

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...

CVE-2018-16518

Affected software: Prim'X Zed! FREE (up to 1.0 build 186) and Zed! Limited Edition (up to 6.1 build 2208). Vulnerability type: directory traversal with remote code execution. Root cause / vector: watermark loading function can place an executable file into a Startup folder via crafted ZED! contai...