7037 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2020-5414
VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...
CVE-2020-5414 App Autoscaler logs credentials
VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...
Researchers Warn of High-Severity Dell PowerEdge Server Flaw
Researchers have disclosed details of a recently patched, high-severity Dell PowerEdge server flaw, which if exploited could allow an attacker to fully take over and control server operations. The web vulnerability was found in the Dell EMC iDRAC remote access controller, technology embedded with...
CVE-2020-5611
Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2020-5611
Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Security Bulletin: IBM Sterling Connect:Direct for UNIX Allows a User with Sudo Access Restricted to Certain Connect:Direct Executable Files to Expand Access Beyond the Restriction (CVE-2018-1903)
Summary UNIX system administrators may grant access to run certain executable files with expanded privilege via the sudo utility. Connect:Direct for UNIX has a vulnerability that could allow a user to escape this sudo executable file restriction and perform unauthorized commands with expanded...
Diebold ATM Terminals Jackpotted Using Machine’s Own Software
Cybercriminals are using software from leading ATM manufacturer Diebold in a series of hacks against cash terminals across Europe, forcing the machines to dispense cash to crooks. Criminals using a black-box device common with these type of attacks have increased their activity across Europe by...
CVE-2020-11436
LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators...
CVE-2020-11436
LibreHealth EMR v2.0.0 is reported vulnerable to cross-site scripting (XSS) that can force arbitrary actions on behalf of other users, including administrators. The connected sources confirm the affected product and the impact (unauthorized actions by different user roles), but they do not provid...
Cangzhou Jialan Network Technology Co., Ltd. unauthorized access vulnerability in the virtual goods automatic delivery system
JiaBlue virtual goods automatic delivery system is the latest one-stop self-service delivery platform launched by JiaBlue Technology, which supports automatic delivery of virtual goods, paid article reading, paid audio and video, paid gallery and so on. The whole process does not require human...
[SECURITY] Fedora 31 Update: remmina-1.4.7-1.fc31
Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...
[SECURITY] Fedora 32 Update: remmina-1.4.7-1.fc32
Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...
Palo Alto Networks PAN-OS 9.1.x < 9.1.3 Integer Underflow Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 9.1.x prior to 9.1.3. It is, therefore, affected by an integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface. This allows authenticated administrators to issue a command from the command...
CVE-2020-15072
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Administrators section...
CVE-2020-15073
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section...
CVE-2020-15072
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Administrators section...
Sql injection
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Administrators section...
Design/Logic Flaw
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section...
