98 matches found
CVE-2024-34882
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request...
CVE-2024-34885
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request...
CVE-2024-34887
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...
CVE-2024-34885
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request...
CVE-2024-34887
CVE-2024-34887 affects 1C-Bitrix Bitrix24 23.300.100. The issue is "insufficiently protected credentials" in AD/LDAP server settings, enabling remote administrators to exfiltrate AD/LDAP administrator passwords to an arbitrary server via HTTP POST. Public sources (Red Hat, CNNVD, CVE listings) de...
CVE-2024-34885
The CVE-2024-34885 entry concerns Bitrix24 (1C-Bitrix Bitrix24) version 23.300.100, where credentials in SMTP server settings are insufficiently protected. The underlying issue allows remote administrators to read SMTP account passwords via an HTTP GET request. The vulnerability impacts confident...
CVE-2024-34883
CVE-2024-34883 affects 1C-Bitrix Bitrix24 v23.300.100. The vulnerability arises from insufficient protection of credentials in the DAV server settings, enabling remote administrators to read proxy-server account passwords via an HTTP GET request. Impact is confidentiality: high. Exploitation deta...
1c-wiseadvice.ru Cross Site Scripting vulnerability OBB-3921189
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
1c-wiseadvice.ru Cross Site Scripting vulnerability OBB-3855723
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security fix for the ALT Linux 9 package postgresql12-1C version 12.14-alt0.M90P.1
12.14-alt0.M90P.1 built Feb. 28, 2023 Alexei Takaseev in task 314856 Feb. 8, 2023 Alexei Takaseev - 12.14 Fixes CVE-2022-41862 - Update 1C patch...
Security fix for the ALT Linux 10 package postgresql13 version 13.10-alt1
13.10-alt1 built Feb. 20, 2023 Alexei Takaseev in task 314938 Feb. 8, 2023 Alexei Takaseev - 13.10 Fixes CVE-2022-41862 - Conflicts: 14-1C - 15-1C...
Security fix for the ALT Linux 10 package postgresql15-1C version 15.2-alt1
15.2-alt1 built Feb. 20, 2023 Alexei Takaseev in task 314938 Feb. 8, 2023 Alexei Takaseev - 15.2 Fixes CVE-2022-41862...
SUSE CVE-2020-35376
Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...
CVE-2022-43959
Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the source code of /bitrix/admin/ldapserveredit.php...
CVE-2022-43959
The CVE-2022-43959 entry concerns 1C-Bitrix Bitrix24 (through version 22.200.200) with an issue in AD/LDAP server settings where credentials are insufficiently protected. The root cause is exposure of an AD/LDAP administrative password by reading the source code of /bitrix/admin/ldap_server_edit....
Security fix for the ALT Linux 9 package postgresql12-1C version 12.11-alt0.M90P.3
12.11-alt0.M90P.3 built Sept. 1, 2022 Alexei Takaseev in task 305052 Aug. 10, 2022 Alexei Takaseev - Fixes CVE-2022-2625...
Security fix for the ALT Linux 10 package postgresql15-1C version 14.5-alt1
Aug. 10, 2022 Alexei Takaseev 14.5-alt1 - 14.5 Fixes CVE-2022-2625...
Security fix for the ALT Linux 9 package postgresql12-1C version 12.11-alt0.M90P.1
12.11-alt0.M90P.1 built May 18, 2022 Alexei Takaseev in task 299776 May 11, 2022 Alexei Takaseev - 12.11 Fixes CVE-2022-1552...