Code injection

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names...

CVE-2018-14597

The CVE-2018-14597 entry involves CA Technologies Identity Governance components: Identity Governance versions 12.6, 14.0, 14.1, and 14.2, and CA Identity Suite Virtual Appliance versions 14.0–14.2. The issue stems from verbose error messages that may allow remote attackers to enumerate account n...

CVE-2018-14597

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names...

PT-2018-12605

Name of the Vulnerable Software and Affected Versions CA Technologies Identity Governance versions 12.6, 14.0, 14.1, and 14.2 CA Identity Suite Virtual Appliance versions 14.0, 14.1, and 14.2 Description The issue allows remote attackers to enumerate account names due to telling error messages...

CVE-2018-14597: Observable Discrepancy

CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names...

Fedora 27 : ca-certificates (2018-11b3ae4e31)

This is an update to Mozilla's CA certificates list version 2.26, which has been published as part of Mozilla NSS 3.39. For additional details, please refer to the NSS 3.39 release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

Fedora Update for ca-certificates FEDORA-2018-11b3ae4e31

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS v4.1.0 SQL injection vulnerability exists , the vulnerability stems from the failure to filter ca.php file in the groupname parameter , an attacker can use the...

ca.romwe.com XSS vulnerability

Open Bug Bounty ID: OBB-683420 Description| Value ---|--- Affected Website:| ca.romwe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

Fedora Update for ca-certificates FEDORA-2018-ff58779d1b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: ca-certificates-2018.2.26-2.fc29

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 28 Update: ca-certificates-2018.2.26-1.0.fc28

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

ns.211.ca XSS vulnerability

Open Bug Bounty ID: OBB-680427 Description| Value ---|--- Affected Website:| ns.211.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.theoplayer.com XSS vulnerability

Open Bug Bounty ID: OBB-680358 Description| Value ---|--- Affected Website:| support.theoplayer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

probullstats.com XSS vulnerability

Open Bug Bounty ID: OBB-680202 Description| Value ---|--- Affected Website:| probullstats.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[ASA-201809-4] strongswan: authentication bypass

Arch Linux Security Advisory ASA-201809-4 ========================================= Severity: High Date : 2018-09-24 CVE-ID : CVE-2018-16151 CVE-2018-16152 Package : strongswan Type : authentication bypass Remote : Yes Link : https://security.archlinux.org/AVG-769 Summary ======= The package...

ca-agentur.de XSS vulnerability

Open Bug Bounty ID: OBB-678414 Description| Value ---|--- Affected Website:| ca-agentur.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hyperledger: Brute Force of fabric-ca server admin account

fabric-ca server - Default configuration maxenrollments value -1enable outside enrollment - Listening 0.0.0.0:7054easily discoved and can be reached - No limit to wrong password try Above conditions result in brute force to CA server admin account Impact Attack gain a high-level permissioned...

CA Release Automation NiMi 6.5 Remote Command Execution

Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release...

CA Release Automation NiMi 6.5 - Remote Command Execution Exploit

Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release Automation NiMi 5.X,...