4687 matches found
NetworkManager Access Control Error Vulnerability
NetworkManager is a network management daemon. A security vulnerability exists in NetworkManager that stems from the fact that nmcli command line interface does not enforce the 802-1x.ca-path and 802-1x.phase2-ca-path settings. No details of the vulnerability are available at this time...
Ubuntu: Security Advisory (USN-4377-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ca-certificates update (USN-4377-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4377-1 advisory. The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the AddTrust External...
USN-4377-2 ca-certificates update
USN-4377-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root"...
USN-4377-2: ca-certificates update
USN-4377-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root"...
USN-4377-1: ca-certificates update
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA. In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package...
USN-4377-1 ca-certificates update
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA. In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package...
PT-2020-22766
Name of the Vulnerable Software and Affected Versions ca-certificates versions prior to the update that removes the "AddTrust External Root" CA Description The ca-certificates package contained an expired CA certificate that caused connectivity issues. This issue was resolved by removing the...
PT-2020-22765
Name of the Vulnerable Software and Affected Versions ca-certificates versions prior to the update that removes the "AddTrust External Root" CA Description The ca-certificates package contained an expired CA certificate that caused connectivity issues. This issue was resolved by removing the...
career1.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1172331 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
OpenSSL Vulnerabilities Sep 2019 – Apr 2020
Summary Symantec Web Security Group WSG products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A local or remote attacker can obtain private key or other secret key information. A remote attacker can also cause denial of service. Affected Products The followin...
PT-2020-6870
Name of the Vulnerable Software and Affected Versions Network Manager affected versions not specified Description The issue is related to the nmcli command line interface of Network Manager, where incorrect settings are applied when creating a new profile. This allows a remote attacker to access...
Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...
legacy.411.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1156202 Security Researcher virbhushanprab1 Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting legacy.411.ca website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...
python-urllib3: Certification mishandle when error should be thrown
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use o...
SQL Injection Vulnerability in Ca***.aspx Page of Qixing Fault Reporting System
Qixing Fault Reporting System is a platform based on ASP.NET language to help organizations to report faults. A SQL injection vulnerability exists in the Ca.aspx page of the Qixing Fault Reporting System, which can be exploited by attackers to obtain sensitive information from the database...
benefitsfinder.services.gc.ca Open Redirect vulnerability
Open Bug Bounty ID: OBB-1146158 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting benefitsfinder.services.gc.ca website and its users...
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action...
