34 matches found
CVE-2023-29137
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users...
CVE-2023-29137
Summary: CVE-2023-29137 concerns the GrowthExperiments extension for MediaWiki (up to 1.39.3). The UserImpactHandler inadvertently returns the timezone preference for arbitrary users, enabling potential de-anonymization. The issue is rooted in the extension’s handling of user data (timezone prefe...
CVE-2023-29137
An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users...
Microsoft Windows Multiple Vulnerabilities (KB5014012)
This host is missing an important security update according to Microsoft KB5014012 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-29137
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-29137
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-29137
Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.
KB5013963: Windows 10 LTS 1507 Security Update (May 2022)
The remote Windows host is missing security update 5013963. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139,...
KB5013945: Windows 10 version 1909 Security Update (May 2022)
The remote Windows host is missing security update 5013945. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137,...
KB5013941: Windows 10 version 1809 / Windows Server 2019 Security Update (May 2022)
The remote Windows host is missing security update 5013941. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137,...
KB5013952: Windows 10 Version 1607 and Windows Server 2016 Security Update (May 2022)
The remote Windows host is missing security update 5013952. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139,...
CVE-2021-29137
Aruba AirWave Management Platform before version 8.2.12.1 contains a remote URL redirection vulnerability. The affected product is Aruba AirWave Management Platform; vulnerable component is the URL redirection logic. Aruba has released patches addressing this vulnerability, with the fix included ...
CVE-2020-29137
CVE-2020-29137 affects cPanel prior to 90.0.17, with a self‑XSS vulnerability in the WHM Transfer Tool interface (SEC-577). The issue is limited to the Transfer Tool’s UI and is triggered by user input that could execute script in the victim’s browser. Exploitation details are not provided in the...
aerojobs.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1189188 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...