PT-2019-1365

Name of the Vulnerable Software and Affected Versions Juniper ATP versions prior to 5.0.3 Description A persistent cross-site scripting XSS issue in the Golden VM menu of Juniper ATP may allow an authenticated user to inject arbitrary script, potentially stealing sensitive data and credentials fr...

golden-spain.com XSS vulnerability

Open Bug Bounty ID: OBB-713998 Description| Value ---|--- Affected Website:| golden-spain.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

SQL Injection Vulnerability in Golden Magpie T3 Wooden Door Enterprise Management Software

Golden Magpie T3 series of wooden door software is developed by Nanjing Golden Magpie Software Technology Co., Ltd. and adopts the B/S architecture mode of an enterprise management system. Golden Magpie T3 Wooden Door Enterprise Management Software has a SQL injection vulnerability, which can be...

The vulnerability of the Monitoring Manager component in the real-time data synchronization tool Oracle GoldenGate allows a hacker to gain full control over the application.

The vulnerability of the Monitoring Manager component in the real-time data synchronization tool Oracle GoldenGate arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using a TCP...

golden-time.ru XSS vulnerability

Open Bug Bounty ID: OBB-691045 Description| Value ---|--- Affected Website:| golden-time.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

golden-time.ru XSS vulnerability

Open Bug Bounty ID: OBB-690803 Description| Value ---|--- Affected Website:| golden-time.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2018-24129)

Oracle GoldenGate is the United States Oracle Oracle company for real-time data integration and replication in IT environments, a comprehensive software package, which supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities...

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2018-24130)

Oracle GoldenGate is the United States Oracle Oracle company for real-time data integration and replication in IT environments, a comprehensive software package, which supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities...

Vulnerabilities in Golden Power Grid's Trusted Operations and Maintenance Management System due to Override Access

Golden Grid AnTrust O&M Management System provides a professional "human-machine" interactive O&M platform and professional "human-machine" delivery solutions. There is a vulnerability in the Golden Grid Secure and Trusted O&M Management System GGTAMS. An attacker can use the vulnerability to...

golden-farm.biz XSS vulnerability

Open Bug Bounty ID: OBB-662964 Description| Value ---|--- Affected Website:| golden-farm.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10896

CVE-2018-10896 is confirmed in multiple Nessus/OpenVAS entries tied to cloud-init. The issue arises from the default cloud-init configuration (ssh_deletekeys: 0) introduced in cloud-init 0.6.2 and newer, which disables deletion of SSH host keys on new instances. This can allow cloned golden-maste...

golden-schenken.de XSS vulnerability

Open Bug Bounty ID: OBB-646215 Description| Value ---|--- Affected Website:| golden-schenken.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

Code injection

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133

Connected documents indicate CVE-2018-13133 concerns Golden Frog VyprVPN prior to 2018-06-21 and a Windows installer vulnerability. The PRION record lists the issue as “Code injection” with no further technical specifics, and other sources reiterate the vulnerable timeframe without detailing root...

CVE-2018-13133: Untrusted Search Path

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

PT-2018-11623

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN versions prior to 2018-06-21 Description The issue is related to the installation process of Golden Frog VyprVPN on Windows. Recommendations For versions prior to 2018-06-21, update to a version released after 2018-06-21 to...

CVE-2018-10645

CVE-2018-10645 affects Golden Frog VyprVPN 2.12.1.8015 for Windows. The VyprVPN service exposes a NetNamedPipe endpoint; its SetProperty method allows configuring AdditionalOpenVpnParameters and OpenVPN command line, enabling a dynamic library plugin via the OpenVPN plugin parameter to run code u...

CVE-2018-10645: Incorrect Permission Assignment for Critical Resource

Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...