13085 matches found
Cross site scripting
A stored cross-site scripting XSS vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen ...
CVE-2020-5141
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS...
CVE-2020-5137
SonicOS contains a buffer overflow allowing a remote unauthenticated attacker to cause DoS on the SSLVPN service and crash the firewall. Affected: SonicOS Gen 5 (5.9.1.7, 5.9.1.13), Gen 6 (6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv 6.5.4.v, Gen 7 (7.0.0.0). Root cause: buffer overflow in SSLVPN handli...
Security Bulletin: IBM QRadar SIEM is vulnerable to deserialization of untrusted data
Summary IBM QRadar SIEM could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function Vulnerability Details CVEID: CVE-2020-4280 DESCRIPTION: IBM QRadar could allow a remote attacker to...
[SECURITY] Fedora 31 Update: crun-0.15-5.fc31
crun is a runtime for running OCI containers...
CVE-2000-0803 affecting package groff 1.22.3-5
CVE-2000-0803 affecting package groff 1.22.3-5. A patched version of the package is available...
Exploit for Improper Verification of Cryptographic Signature in Microsoft
PoC exploit for CVE-2013-3900 IEC 60870-5-104 protocol vulnerability Target product/service: IEC 60870-5-104 protocol Vulnerability class/vector: Authentication bypass Probable entry points: TCP port 2404 Notable dependencies/tooling: Scapy Execution context: Send a specially crafted packet to th...
samba security, bug fix, and enhancement update
4.10-16-5 - related: 1785121 - Add missing RPM Requires 4.10.16-2 - resolves: 1828354 - add additioanl hostnames to the keytab - resolves: 1836427 - add dnshostname option net-ads-join 4.10.16-1 - related: 1785121 - Rebase to version 4.10.16 4.10.15-5 - resolves: 1831986 - Fix gencache for normal...
Rockwell Automation ISaGRAF5 Runtime (Update A)
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ISaGRAF5 Runtime Vulnerabilities: Use of Hard-coded Cryptographic Key, Unprotected Storage of Credentials, Relative Path Traversal, Uncontrolled Search Path Element,...
sim.tuodominio.it Cross Site Scripting vulnerability OBB-1383806
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dojezdova-kola.cz Cross Site Scripting vulnerability OBB-1383582
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
travekos.com Cross Site Scripting vulnerability OBB-1383206
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kosulsuz-sevgi.com Cross Site Scripting vulnerability OBB-1383136
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
epuresolutions.com Cross Site Scripting vulnerability OBB-1383003
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
absolutehotelservices.com Cross Site Scripting vulnerability OBB-1382836
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
zoek.2link.be Cross Site Scripting vulnerability OBB-1382842
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
taria.unas.cz Cross Site Scripting vulnerability OBB-1382802
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
flexible-learning.mannaz.com Cross Site Scripting vulnerability OBB-1382671
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
adrenaliner.com Cross Site Scripting vulnerability OBB-1382636
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ebiz.ycc.ac.kr Cross Site Scripting vulnerability OBB-1378341
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...