5856 matches found
Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 8.2 CWE-325, CWE-20, CWE-200, CWE-502 Problem It has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. This allows to inject arbitrary data having a valid cryptographic message...
GHSA-4H44-W6FM-548G Potential Remote Code Execution in TYPO3 with mediace extension
Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9.1 CWE-325, CWE-20, CWE-200, CWE-502 Problem It has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. This allows to inject arbitrary data having a valid cryptographic message...
Huawei Mate 20 Improper Authorization Vulnerability
Huawei Mate 20 is a smartphone launched by Huawei. A security vulnerability exists in versions prior to Huawei Mate 20 10.1.0.160 C00E160R2P11. The vulnerability stems from the software's inability to appropriately restrict certain operations under certain circumstances. An attacker could use the...
CVE-2020-9251
HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...
CVE-2020-9251
HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...
Authorization
HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...
CVE-2020-9251
CVE-2020-9251 affects Huawei Mate 20 smartphones with versions earlier than 10.1.0.160 (C00E160R2P11 / C00E160R3P8). Root cause is improper authorization that does not properly restrict certain operations in specific scenarios. An attacker who configures settings before the user enables the Stude...
CVE-2020-9251
HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...
CVE-2020-7518
A CWE-20: Improper input validation vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to modify project configuration files...
Input validation
A CWE-20: Improper input validation vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to modify project configuration files...
CVE-2020-7518
CVE-2020-7518 affects Schneider Electric Easergy Builder (versions 1.4.7.2 and older). The vulnerability is caused by improper input validation (CWE-20) that could allow an attacker to modify project configuration files. The Red Hat, CNVD, and NVD entries align on the same vulnerability descripti...
CVE-2020-7518
A CWE-20: Improper input validation vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to modify project configuration files...
ktm-bikes.co.il Cross Site Scripting vulnerability OBB-1233218
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hoshokaku.co.jp Cross Site Scripting vulnerability OBB-1233157
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
oldgames.sk Cross Site Scripting vulnerability OBB-1232787
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
artofcolors.in Cross Site Scripting vulnerability OBB-1232645
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dichthuatvietuc.com.vn Cross Site Scripting vulnerability OBB-1232409
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
donkramer.thepreferredrealty.com Cross Site Scripting vulnerability OBB-1232410
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
andreasalvatore.it Cross Site Scripting vulnerability OBB-1232222
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
popite.ru Cross Site Scripting vulnerability OBB-1232163
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...