CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

PT-2020-19051

Name of the Vulnerable Software and Affected Versions SAP Master Data Governance versions 748 through 804 Description The issue allows users to display change request details without having the required authorizations due to a Missing Authorization Check. Recommendations For versions 748 through...

CVE-2020-6256: Missing Authorization

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

The vulnerability of Secutech router microprogramming software, related to insufficient verification of data authenticity, allows a hacker to alter DNS settings.

The vulnerability of Secutech router microprogramming software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to alter DNS settings by making a request to goform/AdvSetDns?GO=wandns.asp...

Cross site request forgery (csrf)

MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request...

CVE-2015-9278: Undefined Security Weakness

MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request...

Red Hat 389 Directory Server Denial of Service Vulnerability (CNVD-2018-09155)

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, and more. A security vulnerability exists in Red Hat 389...

Design/Logic Flaw

The Self-Service Portal in EMC RSA Authentication Manager AM Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service PIN change for an arbitrary user via a modified token serial number within a PIN change request, related to a "direct...

PT-2016-4469

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager AM Prime Self-Service versions 3.0 through 3.1 before 3.1 1915.42871 Description The issue allows remote authenticated users to cause a denial of service, specifically a PIN change for an arbitrary user, by...

Tectia SSH USERAUTH Change Request Password Reset

This Metasploit module exploits a vulnerability in Tectia SSH server for Unix-based platforms. The bug is caused by a SSH2MSGUSERAUTHPASSWDCHANGEREQ request before password authentication, allowing any remote user to bypass the login routine, and then gain access as root. This file is part of the...

CVE-2012-5975: Improper Authentication

The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session...

(SSH.com Communications) SSH Tectia (SSH 2.0-6.1.9.95 Tectia 6.1.9.95) - Remote Authentication Bypass

SSH.com Communications SSH Tectia SSH 2.0-6.1.9.95 Tectia 6.1.9.95 - Remote Authentication Bypass https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/23082.zip SSH Tectia Remote Authentication Bypass Tectia is the commercial OpenSSH solution. The product can be foun...

CVE-2012-3459

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor...

SOL9889 - NTP vulnerability CVE-2009-0021

Description NTP may not properly check the return value from the OpenSSL EVPVerifyFinal function, which may allow a remote attacker to bypass validation of the certificate chain by way of a malformed SSL/TLS signature for DSA and ECDSA keys. Note: This is a similar vulnerability to CVE-2008-5077...

norton.antivirus.passwd.txt

Date: Fri, 9 Apr 1999 16:12:26 -0700 From: "Saling, Kevin" To: [email protected] Subject: NAV for MS Exchange & Internet Email Gateways After installing the following Symantec products: Norton AntiVirus for Internet Email Gateways 1.0.1.7 NAVIEG Norton AntiVirus for MS Exchange 1.5...