Skip to content
OpenAdvisories

Archive

22 November 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.7

    GateManager does not enforce strict hostname matching for WEB server

    This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

  • Low 3.3

    Rapid7 Nexpose Information Disclosure after logout

    Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available i…