56556 matches found
Zephyr 安全漏洞
Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from a security vulnerability that results from unchecked packets from Bluetooth. No details of the vulnerability are provided at this time...
IBM Security Identity Manager 安全漏洞
IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...
All Vulnerabilities for courses.npmcn.gov.ng Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| courses.npmcn.gov.ng ---|--- Open Bug...
Juniper Networks Junos OS 资源管理错误漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a security vulnerability, and no details of the vulnerability are provided at this time...
FreeBSD 资源管理错误漏洞
FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD that stems from incorrectly freeing a process-supplied parameter string. No details of the vulnerability are provided at this time...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security vulnerability, and no details of the vulnerability are provided at this time...
brownstoneresearch.com Cross Site Scripting vulnerability OBB-1958918
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| brownstoneresearch.com ---|--- Open Bug...
Zoom Screen-Sharing Glitch ‘Briefly’ Leaks Sensitive Data
A security blip in the current version of Zoom could inadvertently leak users’ data to other meeting participants on a call. However, the data is only leaked briefly, making a potential attack difficult to carry out. The flaw CVE-2021-28133 stems from a glitch in the screen sharing function of...
All Vulnerabilities for ambcrypto.com Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ambcrypto.com ---|--- Open Bug Bounty...
All Vulnerabilities for elle.fr Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| elle.fr ---|--- Open Bug Bounty Program...
CVE-2021-25767
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution...
Google Chrome 资源管理错误漏洞
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in the speech recognizer in versions prior to Google Chrome 88.0.4324.96. No detailed vulnerability details are provided a...
Unspecified vulnerability in FasterXML jackson-databind (CNVD-2021-03346)
FasterXML jackson-databind is a generic data binding package for Jackson 2.x. A security vulnerability exists in FasterXML jackson-databind. No details of the vulnerability are provided at this time...
多款 NETGEAR 设备命令注入漏洞
The NETGEAR NMS300 is a ProSAFE network management system. A command injection vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No details of the vulnerability are provided at this time...
PT-2020-17363 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered where the global configuration page does not remove secrets from the HTML output, disclosing the current values. Recommendations: For Joomla! versions 2.5.0 through...
CVE-2020-27729
CVE-2020-27729 affects BIG-IP APM open redirect via an undisclosed link in the APM virtual server. The vulnerability allows an attacker to construct a URL that redirects users to a malicious site. Affected versions and fixes (per F5 K15310332 advisory): BIG-IP APM 16.x – vulnerable: 16.0.0; fix i...
CVE-2020-5948
On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the...
OpenAsset Digital Asset Management Cross Site Scripting
Title: Stored cross-site scripting XSS Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.23 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28857 Author: Jack Misiura from The...
JetBrains YouTrack Code Issue Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.3.888 that stem...