17075 matches found
CVE-2010-2064
creationtimestamp| type| source ---|---|--- 2019-10-30 01:31:38+00:00| seen| https://t.me/cibsecurity/7757 2019-11-05 22:27:46+00:00| seen| https://t.me/cibsecurity/7899...
Design/Logic Flaw
rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr...
Design/Logic Flaw
Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...
Design/Logic Flaw
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...
Design/Logic Flaw
paxtest handles temporary files insecurely...
Design/Logic Flaw
An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read...
Design/Logic Flaw
gpw generates shorter passwords than required...
Design/Logic Flaw
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause information disclosure when using the FTP protocol...
Key Compliance Concepts for Financial Services
The Sarbanes-Oxley Act SOX was introduced following a number of financial scandals involving huge conglomerates and obliges companies to establish internal controls to prevent fraud and abuse, holding senior managers accountable for the accuracy of financial reporting. The financial crisis in 200...
Design/Logic Flaw
browser/extensions/api/dial/dialregistry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase call, which causes the erase operation to access data that that erase operation will destroy...
Beers with Talos Ep. #64: Your problem isn’t complex, it's simply complexity
By Mitch Neff Beers with Talos BWT Podcast episode No. 64 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded Oct. 10, 2019 This episode lives up to its name, by trying to only take on a minimal topic and the...
Memory Corruption Vulnerability in CAD Quick Look Tool
CAD Quick View Tool is a CAD viewing software. CAD Quick Viewer Tool suffers from a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could result in a denial of service...
CAD Intelligent Vulnerability with Memory Corruption Vulnerability
CAD Intelligent Weak Power is a design tool for weak power equipment installation. CAD Smart Weak Power Tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, it can lead...
Design/Logic Flaw
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public%25252FadminOnlyRead.txt substring...
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
Authorization
In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...
CVE-2019-18350
In Ant Design Pro 4.0.0, a reflected XSS in the user/login redirect GET parameter affects the authorization component, allowing execution of JavaScript in the login after-action script. Red Hat and other linked sources confirm the same issue exists across vendors; the vulnerability is tied to the...
