Archive
22 November 2021
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Low 3.7
GateManager does not enforce strict hostname matching for WEB server
This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.
-
Low 3.3
Rapid7 Nexpose Information Disclosure after logout
Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available i…