Linux Distros Unpatched Vulnerability : CVE-2019-17002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https...

CVE-2019-17002

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox 70...

RICOH MP 2001 Cross-site Scripting (CVE-2018-17002)

On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

CVE-2020-17002

Azure SDK for C Security Feature Bypass Vulnerability...

CVE-2020-17002 Azure SDK for C Security Feature Bypass Vulnerability

...

CVE-2020-17002

CVE-2020-17002 affects the Azure SDK family, notably the C language SDK, described as a Security Feature Bypass Vulnerability. Connected sources corroborate a bypass vulnerability in the Azure SDK for C (and related Java variant) that could bypass security controls. The OSV and KLA analyses refer...

KLA12020 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server can be...

CVE-2019-17002

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox 70...

CVE-2019-17002

CVE-2019-17002 affects Mozilla Firefox versions before 70.0. If upgrade-insecure-requests is set in the Content Security Policy and a link is dragged and dropped from that page, the link is not upgraded to https, exposing users to potential security bypass and stability issues. The primary impact...

RICOH MP 2001 Printer Cross Site Scripting

Exploit Title: RICOH MP 2001 Printer - HTML Injection and Stored XSS Date: 2018-09-13 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.com.au/products/office-solutions/printers-and-copiers/mfd-black-and-white/mp-2001sp Software : RICOH...

CVE-2017-17002

CVE-2017-17002 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2017-17002

...