Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

url redirect project url redirect vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2021-43844
MSEdgeRedirect is a tool to redirect news, search, widgets, weather, and more to a user's default browser. MSEdgeRedirect versions prior to 0.5.0.1 are vulnerable to Remote Code Execution via specifically crafted URLs. This vulnerability requires user interaction and the acc...
Msedgeredirect Project Msedgeredirect
7.5
CVSSv2
CVE-2019-16682
The url_redirect (aka URL redirect) extension up to and including 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.
Url Redirect Project Url Redirect
7.5
CVSSv2
CVE-2018-3774
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
Url-parse Project Url-parse
7.5
CVSSv2
CVE-2005-3120
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and previous versions allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Invisible-island LynxDebian Debian Linux 3.1Debian Debian Linux 3.0
6.8
CVSSv2
CVE-2019-3878
A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start t...
Mod Auth Mellon Project Mod Auth MellonFedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
6.8
CVSSv2
CVE-2015-2296
The resolve_redirects function in sessions.py in requests 2.1.0 up to and including 2.5.3 allows remote malicious users to conduct session fixation attacks via a cookie without a host value in a redirect.
Mageia Project Mageia 4.0Python Requests 2.1.0Python Requests 2.2.1Python Requests 2.3.0Python Requests 2.4.1Python Requests 2.4.3Python Requests 2.5.0Python Requests 2.5.1Python Requests 2.5.2Python Requests 2.4.0Python Requests 2.4.2Python Requests 2.5.3Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04
6.8
CVSSv2
CVE-2011-1403
Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara prior to 1.3.6 allows remote malicious users to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.
Mahara Mahara 1.0.6Mahara Mahara 1.1.1Mahara Mahara 1.0.0Mahara Mahara 1.0.4Mahara Mahara 1.0.10Mahara Mahara 1.3.1Mahara Mahara 1.3.0Mahara Mahara 1.1.0Mahara Mahara 1.1.6Mahara Mahara 1.1.5Mahara Mahara 1.2.0Mahara Mahara 1.0.14Mahara Mahara 1.2.1Mahara Mahara 0.9.0Mahara Mahara 1.2.3Mahara Mahara 1.2.5Mahara Mahara 1.0.8Mahara Mahara 1.0.7Mahara Mahara 1.0.1Mahara Mahara 0.9.2Mahara Mahara 1.2.6Mahara Mahara 1.1.4
6.8
CVSSv2
CVE-2008-5506
Mozilla Firefox 3.x prior to 3.0.5 and 2.x prior to 2.0.0.19, Thunderbird 2.x prior to 2.0.0.19, and SeaMonkey 1.x prior to 1.1.14 allows remote malicious users to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource t...
Mozilla FirefoxMozilla ThunderbirdMozilla SeamonkeyCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10Debian Debian Linux 4.0Debian Debian Linux 5.0
6.5
CVSSv2
CVE-2022-24857
django-mfa3 is a library that implements multi factor authentication for the django web framework. It achieves this by modifying the regular login view. Django however has a second login view for its admin area. This second login view was not modified, so the multi factor authent...
Django-mfa3 Project Django-mfa3
6.5
CVSSv2
CVE-2011-1402
Mahara prior to 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a...
Mahara Mahara 1.1.2Mahara Mahara 1.0.5Mahara Mahara 1.0.8Mahara Mahara 0.9.1Mahara Mahara 1.0.1Mahara Mahara 1.1.0Mahara Mahara 1.2.6Mahara Mahara 1.3.0Mahara Mahara 1.1.9Mahara Mahara 1.1.4Mahara Mahara 1.1.7Mahara Mahara 1.1Mahara Mahara 1.2.2Mahara Mahara 1.2.0Mahara MaharaMahara Mahara 1.0.6Mahara Mahara 1.0.2Mahara Mahara 1.0.0Mahara Mahara 1.0.10Mahara Mahara 1.0.13Mahara Mahara 1.1.6Mahara Mahara 1.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firewallCVE-2024-35649stored XSSCVE-2022-28654CVE-2020-35153CVE-2024-27348CVE-2022-28652local usersCVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook