64362 matches found
Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)
Summary Multiple vulnerabilities have been identified in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...
okashik.com Cross Site Scripting vulnerability OBB-3649394
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: Vulnerability found in fop-1.1.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5661)
Summary Vulnerability have been identified in fop-1.1.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2017-5661...
USN-6336-1 docker-registry vulnerabilities
It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2017-11468 It was discovered that Docker Registry incorrectly handled certain crafted inpu...
Security Bulletin: Vulnerabilities found in batik-all-1.7.jar, batik-dom-1.7.jar which is shipped with IBM® Intelligent Operations Center(CVE-2018-8013, CVE-2017-5662, CVE-2015-0250)
Summary Multiple vulnerabilities have been identified in batik-all-1.7.jar, batik-dom-1.7.jar which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs...
CVE-2017-9453
BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...
CVE-2017-9453
BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...
CVE-2017-9453
CVE-2017-9453 affects BMC Server Automation prior to 8.9.01 patch 1. The root cause is an authentication bypass that enables the Process Spawner to execute commands, leading to potential remote compromise. The impact is reported as high/critical, with CVSS metrics indicating remote access without...
Ubuntu: Security Advisory (USN-6336-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Qualys Top 20 Most Exploited Vulnerabilities
The earlier blog posts showcased an overview of the vulnerability threat landscape that is either remotely exploited or most targeted by attackers. A quick recap – We focused on high-risk vulnerabilities that can be remotely exploited with or without authentication, and with the view on the time ...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : Docker Registry vulnerabilities (USN-6336-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6336-1 advisory. It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could...
CVE-2023-39373
A Hyundai model 2017 - CWE-294: Authentication Bypass by Capture-replay...
Authentication flaw
A Hyundai model 2017 - CWE-294: Authentication Bypass by Capture-replay...
CVE-2023-39373 Hyundai car CWE-294: Authentication Bypass by Capture-replay
A Hyundai model 2017 - CWE-294: Authentication Bypass by Capture-replay...
CVE-2023-39373
The CVE-2023-39373 entry describes an authentication bypass by capture-replay in Hyundai model 2017 (CWE-294). Affected component is the vehicle’s authentication mechanism; impact is high on integrity but no confidentiality/availability impact reported. Exploitation status is not detailed in the ...
PT-2023-26902 · Hyundai · Hyundai
Name of the Vulnerable Software and Affected Versions: Hyundai model version 2017 Description: The issue is related to an authentication bypass by capture-replay, identified as CWE-294. This allows for unauthorized access. Recommendations: For the Hyundai model version 2017, at the moment, there ...
Hyundai Model 2017 Security Breach
Hyundai model is a Hyundai automobile from Hyundai South Korea. Hyundai Model 2017 has a security vulnerability that stems from the ability to bypass authentication by capturing replay...
BELL-CVE-2017-7547 CVE-2017-7547 does not affect BellSoft software
Bulletin has no description...