9 matches found
CVE-2020-19766
The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the duration variable, compromising access control to the application...
CVE-2019-19766
The Bitwarden server through 1.32.0 has a potentially unwanted KDF...
CVE-2019-19766
creationtimestamp| type| source ---|---|--- 2024-03-11 15:16:38+00:00| seen| https://t.me/ctinow/204766...
CVE-2020-19766
creationtimestamp| type| source ---|---|--- 2021-09-08 02:22:58+00:00| seen| https://t.me/cibsecurity/28411...
CVE-2020-19766
CVE-2020-19766 concerns PepeAuctionSale 1.0, where the time check can be bypassed by assigning a large value to the internal _duration variable, compromising access control. The connected sources consistently describe this logic-flaw in PepeAuctionSale leading to elevated or unrestricted access, ...
CVE-2019-19766
The Bitwarden server through 1.32.0 has a potentially unwanted KDF...
CVE-2019-19766
CVE-2019-19766 affects Bitwarden server 1.32.0 and earlier, with a cryptographic issue described as a potentially unwanted KDF. Connected sources (CNVD, RH, NVD, OSV, OSV) identify Bitwarden server as the affected product and versions ≤1.32.0; the CVSS vectors indicate Confidentiality impact (per...
CVE-2018-19766
CVE-2018-19766 affects InfoVista VistaPortal SE 5.1 (build 51029). The page GroupRessourceAdmin.jsp suffers a reflected XSS via the ConnPoolName parameter. Data from NVD reports CVSS2 base 4.3 (Network, Medium, no privileges, user interaction not required, partial integrity) and CVSS3 base 6.1 (N...
VistaPortal SE 5.1 Cross Site Scripting
Complete list: CVE-2018-19649, CVE-2018-19765, CVE-2018-19766, CVE-2018-19767, CVE-2018-19768, CVE-2018-19769, CVE-2018-19770, CVE-2018-19771, CVE-2018-19772, CVE-2018-19773, CVE-2018-19774, CVE-2018-19775, CVE-2018-19809, CVE-2018-19810, CVE-2018-19811, CVE-2018-19812, CVE-2018-19813,...