Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

Summary A vulnerability in Boundary was identified such that when a Key Management Service KMS was defined in Boundary’s configuration file with the intent of using the KMS to encrypt the credentials stored on disk, new credentials created after an automatic rotation may not have been encrypted v...

CVE-2022-0690

creationtimestamp| type| source ---|---|--- 2022-02-19 20:39:19+00:00| seen| https://t.me/cibsecurity/37824...

CVE-2022-0690 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0690 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0690

CVE-2022-0690 is a reflected Cross-site Scripting (XSS) vulnerability in microweber/microweber prior to version 1.2.11. The public documents consistently describe it as XSS affecting Packagist microweber/microweber; no patch version or remediation steps are provided in the supplied sources. A Hun...

CVE-2021-0690

CVE-2021-0690 is an Android vulnerability describing an out-of-bounds write (heap buffer overflow) in ih264d_parse_pslice.c that could cause remote information disclosure without extra privileges. Affected Android versions include 8.1, 9, 10, and 11. The issue is exploitable via network-like cond...

CVE-2021-0690

creationtimestamp| type| source ---|---|--- 2021-09-09 16:30:47+00:00| seen| https://t.me/truesecator/2087 2021-10-06 18:32:18+00:00| seen| https://t.me/cibsecurity/30058...

CVE-2020-0690

CVE-2020-0690 corresponds to a DirectX elevation-of-privilege vulnerability caused by improper handling of memory objects. According to the initial entry, it has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction, and requires no privileges; impact to confide...

Microsoft Windows Multiple Vulnerabilities (KB4540689)

This host is missing a critical security update according to Microsoft KB4540689 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-0690

The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...

KLA11876 Multiple vulnerabiltiies in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of servi...

Microsoft Windows Hyper-V CVE-2019-0690 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host server, resulting in a denial of service condition. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 Version...

KB4489882: Windows 10 Version 1607 and Windows Server 2016 March 2019 Security Update

The remote Windows host is missing security update 4489882. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability...

CVE-2018-0690

CVE-2018-0690 affects Sony Music Center for PC prior to 1.0.02, where the software update process does not validate updates securely. This enables a man-in-the-middle attacker to tamper with an update file and inject executable files during the update, potentially leading to code execution on the...

CVE-2017-0690

CVE-2017-0690 is a DoS vulnerability in Android’s media framework. Connected CNVD/NVD entries describe a denial of service that can be triggered by a remote attacker, with the backreference triggering a null pointer scenario. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...

CVE-2013-0690

CVE-2013-0690 entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-0690

...

Design/Logic Flaw

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690...

CVE-2016-0690

CVE-2016-0690 : An unspecified vulnerability in the Oracle Database Server’s RDBMS Security component affects versions 11.2.0.4, 12.1.0.1, and 12.1.0.2, permitting local attackers to impact integrity via unknown vectors. The connected documents describe it as an unspecified flaw with no concrete ...

Oracle: Security Advisory (ELSA-2013-0690)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...