Archive
26 May 2017
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 6.8
Apache Knox allows impersonation of users
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this …
-
Medium 4.3
Contao Core directory traversal vulnerability
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.
-
Medium 6.5
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns p…