8711 matches found
CVE-2018-14863
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...
Improper access control
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...
CVE-2018-14863
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...
CVE-2018-14863
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...
CVE-2018-14863
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...
On Isogenies Verifiable Delay Functions (VDF)
This continues the post frompart 1. In the previous post we discussed about Verifiable Delay Functions. Here is a quick summary of what we discussed in the first part: We covered the definition of Verifiable Delay Functions VDF. We have seen a short history of how this idea slowly developed. We...
[SECURITY] Fedora 29 Update: glpi-9.3.4-2.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
[SECURITY] Fedora 30 Update: glpi-9.4.3-1.fc30
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
REDDOXX Appliance Information Disclosure
Advisory: Information Disclosure in REDDOXX Appliance RedTeam Pentesting discovered an Information Disclosure vulnerability in the REDDOXX appliance software, which allows unauthenticated attackers to gain information about the internal network the appliance is part of. Details ======= Product:...
ABB PB610 IDAL HTTP server authentication vulnerability
ABB PB610 is a software from ABB Switzerland that designs graphical user interfaces for the CP600 control panel platform. the IDAL HTTP server is one of the HTTP Hypertext Transfer Protocol servers. A security vulnerability exists in the IDAL HTTP server in the ABB PB610. An attacker could use th...
CVE-2019-7226
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the...
Authentication flaw
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the...
CVE-2019-7226
The CVE-2019-7226 issue affects ABB IDAL HTTP server CGI interface in PB610 Panel Builder 600. The /cgi/loginDefaultUser endpoint allows an unauthenticated attacker to bypass authentication by creating an authenticated session and returning the session token along with the user credentials (usern...
Denial Of Service (DoS)
libopenjpeg.so is vulnerable to denial of service DoS. The functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c cause division-by-zero error, leading to an application crash...
DEBIAN-CVE-2018-20846
Out-of-bounds accesses in the functions pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service application crash...
CVE-2019-12960
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter pdtsd...
CVE-2019-12936
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions...
CVE-2019-12936
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions...
CVE-2019-12936
BlueStacks App Player (versions 2, 3, and 4) prior to 4.90 is affected by CVE-2019-12936, which enables DNS Rebinding to attack exposed IPC functions. The issue stems from the IPC interface exposure and can be triggered via remote interaction over the network. Public-facing exploit details are no...
