Lucene search
+L

3091 matches found

Fedora
Fedora
added 2021/11/12 12:38 a.m.22 views

[SECURITY] Fedora 35 Update: synfigstudio-1.4.0-3.fc35

Synfig Animation Studio is a powerful, industrial-strength vector-based 2D animation software, designed from the ground-up for producing feature-film quality animation with fewer people and resources. It is designed to be capable of producing feature-film quality animation. It eliminates the need...

6.9AI score
SaveExploits0
Fedora
Fedora
added 2021/11/12 12:38 a.m.17 views

[SECURITY] Fedora 35 Update: dvdauthor-0.7.2-16.fc35

DVDAuthor is a set of tools to help you author the file and directory structure of a DVD-Video disc, including programmatic commands for implementing interactive behavior. It is driven by command lines and XML control files, though there are other programs that provide GUI-based front ends if you...

7.3AI score
SaveExploits0
NVD
NVD
added 2021/11/10 4:15 p.m.16 views

CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able ...

7.8CVSS0.00218EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/10 4:15 p.m.7 views

CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able ...

7.8CVSS7.1AI score0.00218EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/10 4:15 p.m.24 views

Information disclosure

An information disclosure vulnerability exists in SAP GUI for Windows - versions 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able ...

2.1CVSS6.9AI score0.00218EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/10 4:15 p.m.6 views

CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able ...

7.8CVSS7.1AI score0.00218EPSS
SaveExploits0References3
CVE
CVE
added 2021/11/10 3:27 p.m.78 views

CVE-2021-40503

CVE-2021-40503 affects SAP GUI for Windows (versions

7.8CVSS6.9AI score0.00218EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/10 3:27 p.m.36 views

CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able ...

7.1AI score0.00218EPSS
SaveExploits0References2
Citrix
Citrix
added 2021/11/09 10:23 a.m.263 views

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADC,Citrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issues: CVE-ID|...

7.5CVSS7.4AI score0.00894EPSS
SaveExploits0Affected Software5
Citrix
Citrix
added 2021/11/09 12:0 a.m.21 views

MaxClient on Httpd

As highlighted athttps://support.citrix.com/article/CTX330728,it is possible for a malicious actor totemporarily disruptthe performance oftheManagementGUI, NitroAPI, and RPC communicationonCitrixADC, CitrixGateway, and Citrix SD-WAN WANOP Edition appliancesunlessthe appliancehas been...

7.5CVSS6.7AI score0.00894EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.7 views

SAP GUI 信息泄露漏洞

SAP GUI is an application from SAP, a German company. graphical user interface for SAP systems. An information disclosure vulnerability exists in SAP GUI for Windows, which arises from the application exporting too much data. A remote user could gain unauthorized access to sensitive system...

7.8CVSS7.4AI score0.00218EPSS
SaveExploits0References5
NVD
NVD
added 2021/11/02 7:15 p.m.39 views

CVE-2020-15935

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields...

4.3CVSS0.00526EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/02 7:15 p.m.21 views

Code injection

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields...

4CVSS4.3AI score0.00526EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/02 7:0 p.m.49 views

CVE-2020-15935

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields...

4.3CVSS4.3AI score0.00526EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/02 7:0 p.m.63 views

CVE-2020-15935

CVE-2020-15935 affects FortiADC GUIs (versions 5.4.3 and earlier; 6.0.0 and earlier). The root cause is cleartext storage/deobfuscation of password fields in the GUI, enabling remote authenticated attackers to retrieve sensitive data such as LDAP passwords and RADIUS shared secret. The connected ...

4.3CVSS4.2AI score0.00526EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/11/02 6:15 p.m.30 views

CVE-2020-12814

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI...

5.4CVSS0.00451EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/02 6:15 p.m.18 views

Input validation

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

4.3CVSS6.3AI score0.00551EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/11/02 6:15 p.m.23 views

Cross site scripting

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI...

3.5CVSS6AI score0.00451EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/11/02 5:56 p.m.19 views

CVE-2020-12814

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI...

4.1CVSS7.5AI score0.00451EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/02 5:41 p.m.32 views

CVE-2021-41019

An improper validation of certificate with host mismatch CWE-297 vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials...

3.5CVSS6.6AI score0.00551EPSS
SaveExploits0References1
Rows per page
Query Builder