7187 matches found
Open-AudIT Multiple Vulnerabilities
Advisory ID Internal CORE-2020-0009 1. Advisory Information Title: Open-AudIT Multiple Vulnerabilities Advisory ID: CORE-2020-0009 Advisory URL: https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities Date published: 2020-04-27 Date of last update: 2020-04-24 Vendors...
Open-AudIT 3.3.0 Cross Site Scripting
Exploit Title: Open-AudIT 3.3.0 - Authenticated XSS Attacks Date: 26-04-2020 Exploit Author: Kamaljeet Kumar Vendor Homepage: https://opmantek.com/network-discovery-inventory-software/ Software Link: https://www.open-audit.org/downloads.php Version: 3.3.0 CVE : CVE-2020-12261 POC: Step 1: Login t...
Various memory safety issues
Several memory safety issues have been uncovered in an audit of rusqlite. See https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 for a complete list...
RUSTSEC-2020-0014 Various memory safety issues
Several memory safety issues have been uncovered in an audit of rusqlite. See https://github.com/rusqlite/rusqlite/releases/tag/0.23.0 for a complete list...
Trend Micro Integrates with Amazon AppFlow
The acceleration of in-house development enabled by public cloud and Software-as-a-Service SaaS platform adoption in the last few years has given us new levels of visibility and access to data. Putting all of that data together to generate insights and action, however, can substitute one challeng...
MITRE ATT&CK APT 29 evaluation proves Microsoft Threat Protection provides deeper end to end view of advanced threats
As attackers use more advanced techniques, it’s even more important that defenders have visibility not just into each of the domains in their environment, but also across them to piece together coordinated, targeted, and advanced attacks. This level of visibility will allow us to get ahead of...
Cross-site Scripting (XSS)
dolibarr is vulnerable to cross-site scripting XSS. With the USERLOGINFAILED setting,an attacker can inject arbitrary script in admin tools -- audit page, possibly stealing admin account...
CVE-2020-10708
race condition in kernel/audit.c may allow low privilege users trigger kernel panic...
CVE-2020-11823
In Dolibarr 10.0.6, if USERLOGINFAILED is active, there is a stored XSS vulnerability on the admin tools -- audit page. This may lead to stealing of the admin account...
UBUNTU-CVE-2020-11823
In Dolibarr 10.0.6, if USERLOGINFAILED is active, there is a stored XSS vulnerability on the admin tools -- audit page. This may lead to stealing of the admin account...
CVE-2020-11823
Dolibarr 10.0.6 is affected by a stored XSS vulnerability on the Admin Tools audit page when USER_LOGIN_FAILED is active. The issue could allow an attacker to steal the admin account; the specific root cause and vulnerable component are described at a high level in multiple sources, but no vendor...
Vulnerability of the Server component: The Audit Log of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component: The Audit Log of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to cause service interruptions using specially crafted network packets...
Vulnerability of the Security component: The MySQL database management system audit mechanism allows attackers to modify data or cause service failures.
Vulnerability of the Security component: Audits of MySQL database management systems are related to deficiencies in access control. Exploitation of this vulnerability can allow a malicious actor to modify data or cause service failures by using specially crafted network packets...
GaussDB: Enable DML Audit
If AUDITLEVEL is set to 4, Data Manipulation Language DML operations, such as INSERT, UPDATE, DELETE, and SELECT are audited. DML is used to manage table data. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
GaussDB: Enable DDL Audit
If AUDITLEVEL is set to 1, only Data Definition Language DDL operations such as CREATE, DROP, and ALTER are audited. DDL is used to define or modify database objects, such as tables, indexes, views, synonyms, databases, sequences, users, roles, tablespaces, profiles, and sessions. In addition,...
PT-2020-12872 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: A stored XSS issue exists in the admin tools -- audit page when the USER LOGIN FAILED feature is active. This could potentially allow for the theft of an admin account. Recommendations: For Dolibarr versio...
GaussDB: Enable PL Audit
If the audit level is set to 8, the parsing and execution of stored procedures are audited, for example, EXECUTE EXEC and CALL. In addition, the definitions of anonymous blocks in stored procedures are audited. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...
The vulnerability of the Server:Audit Plug-in component of the MySQL database management system allows a perpetrator to gain access to read data or modify data.
The vulnerability of the Server:Audit Plug-in component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted network...
ZSQL: Maximum Capacity of an Audit Log File
The parameter AUDITMAXFILESIZE specifies the maximum capacity of an audit log file. The default unit is byte and the default value is 10M. If the size of an audit log file reaches the specified value, another audit log file is automatically created. SPDX-FileCopyrightText: 2020 Greenbone AG Some...
ZSQL: Audit File Path
The LOGHOME parameter specifies the storage path of the audit file. By default, the audit file is stored in the $GSDBDATA/log/audit directory. Note: The script compares the LOGHOME in DVPARAMETERS with the $GSDBDATA/log environmental variable. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...