PT-2020-17067 · Primekey · Primekey Ejbca

Name of the Vulnerable Software and Affected Versions: PrimeKey EJBCA versions prior to 7.4.3 Description: An issue exists when enrolling with EST while proxied through an RA over the Peers protocol, allowing enrollment with a valid client certificate through any functioning and authenticated RA...

Moodle 访问控制错误漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from an Access Control Error vulnerability that stems from a failure to adequately check a user's ability to enroll when...

Moodle 访问控制错误漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from an access control error vulnerability that stems from the fact that if the Upload Course tool is used to delete an...

SQL Injection Vulnerability in the Certificate Search Function of waychar Enrollment System

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the certificate lookup function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in waychar enrollment system VER 0.30

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in waychar registration system VER 0.30, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in waychar Enrollment System Update File

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the waychar registration system update file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Waychar Enrollment System's Password Retrieval Function

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the retrieve password function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...

PT-2020-16160 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 through 3.5.14 Moodle versions 3.7 through 3.7.8 Moodle versions 3.8 through 3.8.5 Moodle versions 3.9 through 3.9.2 Moodle earlier unsupported versions Description: The issue arises from insufficient checks on users'...

PT-2020-16163 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 to 3.5.14 Moodle versions 3.7 to 3.7.8 Moodle versions 3.8 to 3.8.5 Moodle versions 3.9 to 3.9.2 Description: The upload course tool in Moodle contains an issue where deleting a non-existent or disabled enrollment method...

MDM Enrollment Fails Consistently On iOS 14 Devices On Citrix Endpoint Management (On-Prem)

MDM Enrollment Fails Consistently On iOS 14 Devices On Citrix Endpoint Management Server On-Prem...

CVE-2020-25276

An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate...

CVE-2020-25276

An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate...

CVE-2020-25276

PrimeKey EJBCA 6.x and 7.x prior to 7.4.1 is affected. When enrolling via EST using a client certificate, revocation checks are not performed on that certificate, only impacting systems with EST configured and where the revoked certificate is in a role authorized to enroll new end entities. Remed...

CVE-2020-16220

In Patient Information Center iX PICiX Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed i.e., to comply with a certain syntax but it does not validate or incorrectly validates that the input complies with the syntax,...

CVE-2020-16220

In Patient Information Center iX PICiX Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed i.e., to comply with a certain syntax but it does not validate or incorrectly validates that the input complies with the syntax,...

Input validation

In Patient Information Center iX PICiX Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed i.e., to comply with a certain syntax but it does not validate or incorrectly validates that the input complies with the syntax,...

CVE-2020-16220 Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input

In Patient Information Center iX PICiX Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed i.e., to comply with a certain syntax but it does not validate or incorrectly validates that the input complies with the syntax,...

CVE-2020-16220

The CVE-2020-16220 issue affects Philips PICiX (Versions C.02, C.03) and PerformanceBridge Focal Point (Version A.01). It stems from improper validation of input to the certificate enrollment service, where inputs expected to conform to a syntax are not properly validated, causing the certificate...

PT-2020-14819 · Philips · Patient Information Center Ix +1

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions C.02 through C.03 PerformanceBridge Focal Point version A.01 Description: The product receives input that is expected to be well-formed but does not validate or incorrectly validates that the input...

PT-2020-16057 · Primekey · Primekey Ejbca

Name of the Vulnerable Software and Affected Versions: PrimeKey EJBCA versions 6.x through 7.4.0 Description: An issue was discovered where no revocation check is performed on a client certificate when enrolling over the EST protocol. This can affect systems with EST configured, using client...