5054 matches found
CVE-2017-18776
creationtimestamp| type| source ---|---|--- 2020-04-22 19:37:36+00:00| seen| https://t.me/cibsecurity/11521...
CVE-2017-18777
creationtimestamp| type| source ---|---|--- 2020-04-22 19:37:35+00:00| seen| https://t.me/cibsecurity/11520...
CVE-2017-18780
creationtimestamp| type| source ---|---|--- 2020-04-22 19:37:31+00:00| seen| https://t.me/cibsecurity/11517...
CVE-2017-18781
creationtimestamp| type| source ---|---|--- 2020-04-22 19:37:29+00:00| seen| https://t.me/cibsecurity/11516...
CVE-2017-18784
creationtimestamp| type| source ---|---|--- 2020-04-22 18:37:22+00:00| seen| https://t.me/cibsecurity/11511...
CVE-2017-18785
creationtimestamp| type| source ---|---|--- 2020-04-22 18:37:18+00:00| seen| https://t.me/cibsecurity/11510...
CVE-2020-11416
JetBrains Space through 2020-04-22 allows stored XSS in Chats...
Authentication flaw
In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...
CVE-2020-11416
JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...
CVE-2020-11416
JetBrains Space through 2020-04-22 allows stored XSS in Chats...
Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM SPSS Statistics Server (CVE-2017-10356, CVE-2017-10388)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6, 7.0, 7.1, and 8.0 used by IBM SPSS Statistics Desktop and Server Version 22, 23, 24, and 25. These issues were disclosed as part of the IBM Java SDK updates in Oct 2017. Vulnerability Details CVEID:...
CVE-2016-11043
creationtimestamp| type| source ---|---|--- 2020-04-07 16:48:22+00:00| seen| https://t.me/cibsecurity/11059...
Design/Logic Flaw
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...
CVE-2020-7478
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...
CVE-2020-7478
CVE-2020-7478 is a directory traversal vulnerability in Schneider Electric IGSS IGSSupdateservice (versions 14 and prior, using the IGSSupdate service). The flaw allows a remote unauthenticated attacker to read arbitrary files on the IGSS server over the network when the update service is enabled...
LogicalDoc Virtual Appliance Multiple Vulnerabilities
1. Advisory Information Title: LogicalDoc Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2019-004 Advisory URL: Date published: 2020-03-18 Date of last update: 2020-03-17 Vendors contacted: LogicalDoc Release mode: Coordinated release 2. Vulnerability Information Class: Unrestricted...
CVE-2019-15126
creationtimestamp| type| source ---|---|--- 2020-02-26 19:38:09+00:00| seen| https://t.me/ctinow/20756 2020-02-27 08:55:03+00:00| exploited| https://t.me/SecLabNews/6968 2020-02-27 08:58:26+00:00| published-proof-of-concept| https://t.me/truesecator/223 2020-02-27 11:31:04+00:00|...
Rapid7 Metasploit Framework Zip Import Directory Traversal
Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ‘Path Traversal’ in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary code in Metasploit at the privilege level...
