5608 matches found
WatchGuard Fireware Plaintext Password Vulnerability
WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A security vulnerability exists in the AD Helper component of WatchGuard Fireware versions prior to 5.8.5.10317. A remote attacker can...
CVE-2020-10532
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...
CVE-2020-10532
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...
CVE-2020-10532
CVE-2020-10532 affects WatchGuard Fireware (AD Helper) prior to 5.8.5.10317. A remote attacker can obtain cleartext passwords via the /domains/list URI, as described in multiple connected sources. The vulnerability is due to how the AD Helper handles credential data, enabling plaintext password d...
CVE-2020-10532
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link:...
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Vulnerability
Exploit for java platform in category web applications Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Vendor: https://www.watchguard.com Software link:...
WatchGuard Fireware AD Helper 5.8.5.10317 Credential Disclosure
Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...
CVE-2020-10532: Cleartext Storage of Sensitive Information
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...
CVE-2019-18901
A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...
CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files
A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...
CVE-2019-18901: Improper Link Resolution Before File Access
A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...
PT-2020-10009
Name of the Vulnerable Software and Affected Versions mariadb versions prior to 10.2.31-3.25.1 on SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.26.1 on SUSE Linux Enterprise Server 15 Description A UNIX Symbolic Link Symlink Following issue in the mysql-systemd-helper of the...
@codinger/build-helper (1.0.2-rc.1), @onepointfour-npm/pollyfiller (>=1.0.10, <=1.2.3) potentially affected by CVE-2019-10799 via compile-sass (0.1.4)
compile-sass NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on compile-sass and may be impacted: - @codinger/build-helper 1.0.2-rc.1 - @onepointfour-npm/pollyfiller =1.0.10, =1.2.3 Source cves: CVE-2019-10799 Source advisory:...
mariadb for openSUSE mysql-systemd-helper denial of service vulnerability
MariaDB database management system is a branch of MySQL, mainly maintained by the open source community under the GPL license MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. A denial of service vulnerability exist...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
Persistence – Winlogon Helper DLL
Winlogon is a Windows component which handles various activities such as the Logon, Logoff, loading user profile during authentication, shutdown, lock screen etc. This kind of behavior is managed by the registry which defines which processes to start during Windows logon. From a red team...
Node.js third-party modules: [node-downloader-helper] Path traversal via Content-Disposition header
Summary I would like to report path traversal in node-downloader-helper. It allows malicious server to choose download location via ../. It may leads remote code execution. Module module name: node-downloader-helper version: 1.0.11 npm page: https://www.npmjs.com/package/node-downloader-helper...
CVE-2012-4451
Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...