eyeconsultants.net Cross Site Scripting vulnerability OBB-3355500

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5310-1: GNU C Library vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library ...

CVE-2016-3427

creationtimestamp| type| source ---|---|--- 2023-05-16 15:47:20+00:00| seen| https://t.me/theninjaway1337/1371 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 12:49:34+00:00| seen| https://t.me/arpsyndicate/935 2024-12-24 20:34:21+00:00| seen|...

CVE-2016-8735

creationtimestamp| type| source ---|---|--- 2023-05-16 15:47:20+00:00| seen| https://t.me/theninjaway1337/1371 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:21+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971811 2025-02-06 02:41:39+00:00|...

VulnCheck KEV: CVE-2016-8735

Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension JMX ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues...

Apache Tomcat Remote Code Execution Vulnerability

Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension JMX ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for...

postgresql-server -- Row security policies disregard user ID changes after inlining

PostgreSQL Project reports While CVE-2016-2193 fixed most interaction between row security and user ID changes, it missed a scenario involving function inlining. This leads to potentially incorrect policies being applied in cases where role-specific policies are used and a given query is planned...

Description of the security update for SharePoint Enterprise Server 2016: May 9, 2023 (KB5002397)

None None...

End of support for Office 2016 and Office 2019

None None...

Description of the security update for Excel 2016: May 9, 2023 (KB5002386)

None None...

Microsoft Bluetooth Driver 安全漏洞

Microsoft Bluetooth Driver is an application software Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Bluetooth Driver. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Windows NFS Portmapper 安全漏洞

Microsoft Windows NFS is a network file system from Microsoft USA. A security vulnerability exists in Microsoft Windows NFS Portmapper. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809...

Microsoft Windows Network File System 安全漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that lets you transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A security vulnerability exists in Microsoft Windows Network File System. The following products...

KB5026363: Windows 10 Version 1607 and Windows Server 2016 Security Update (May 2023)

The remote Windows host is missing security update 5026363. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-24943 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2016-15031

PHP-Login 1.0 contains a SQL injection in checkLogin() (login/scripts/class.loginscript.php) via the myusername parameter. The issue can be triggered remotely; upgrading to PHP-Login 2.0 mitigates the vulnerability. Patch 0083ec652786ddbb81335ea20da590df40035679 is identified for the fix (VDB-228...

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording DVR devices, according to an advisory issued by Fortinet FortiGuard Labs. The vulnerability in question is CVE-2018-9995 CVSS score: 9.8, a critical authentication bypass issue that could b...

Siemens SIMATIC CP 1543-1 Improper Privilege Management (CVE-2016-8561)

A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices. This plugin only works with...

Siemens TIM 4R-IE Devices Improper Authentication (CVE-2016-4953)

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC NET CP 443-1 OPC UA Improper Input Validation (CVE-2016-4956)

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC NET CP 443-1 OPC UA Out-of-Bounds Read (CVE-2016-2518)

The MATCHASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...