16 matches found
Design/Logic Flaw
This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...
CVE-2022-41141
Windscribe VPN on Windows is affected by CVE-2022-41141, where OpenSSL loads a configuration file from an unsecured location. This enables local attackers who can run low-privilege code to escalate to SYSTEM and execute arbitrary code. The issue is documented by ZDI-22-1300 and is reflected acros...
CVE-2020-16859
Summary for CVE-2020-16859 (Microsoft Dynamics 365 on-premises): A cross‑site scripting vulnerability arises from improper sanitization of a crafted web request to Dynamics Server. An authenticated attacker could trigger XSS in the user’s browser, running scripts in the context of the logged‑in u...
KLA11953 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 On-Premise can be...
openSUSE Security Update : ansible (openSUSE-2019-1125)
This update for ansible to version 2.7.8 fixes the following issues : Security issues fixed: - CVE-2018-16837: Fixed an information leak in user module bsc1112959. - CVE-2018-16859: Fixed an issue which clould allow logging of password in plaintext in Windows powerShell bsc1116587. - CVE-2019-382...
RHEL 7 : ansible (RHSA-2018:3773)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3773 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...
Moderate: Red Hat Security Advisory: ansible security and bug fix update
An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...
Moderate: Red Hat Security Advisory: ansible security and bug fix update
An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Moderate: Red Hat Security Advisory: ansible security and bug fix update
An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CVE-2018-16859
CVE-2018-16859 affects Ansible (Windows) where PowerShell ScriptBlock logging and Module logging can expose become passwords in plaintext in Event Logs when running playbooks. A local administrator can read these logs and obtain the plaintext password. The issue was noted for Ansible Engine 2.8 a...
CVE-2017-16859
CVE-2017-16859 affects Atlassian Fisheye and Crucible: the review attachment resource is vulnerable to path traversal in the command parameter, allowing remote reading of files within the application context. Affected versions are before 4.3.2, and in the 4.4.x line before 4.4.3, as well as befor...
Path traversal Vulnerability in the review attachment resource - CVE-2017-16859
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command...
Path traversal Vulnerability in the review attachment resource - CVE-2017-16859
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command...
Path traversal Vulnerability in the review attachment resource - CVE-2017-16859
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command...
Path traversal Vulnerability in the review attachment resource - CVE-2017-16859
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command...