5019 matches found
CVE-2022-23849
The CVE-2022-23849 affects Devolutions Password Hub for iOS prior to 2021.3.4. A biometric lock authentication bypass allows an attacker to access the app by rapidly issuing failed biometric attempts. Impact is the ability to access the application with partial confidentiality/ integrity/availabi...
CVE-2022-23849
The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...
Devolutions Password Hub 授权问题漏洞
Devolutions Password Hub is a highly secure, flexible and easy-to-use cloud-based password management solution from Devolutions Canada. A security vulnerability exists in Devolutions Password Hub for iOS versions prior to 2021.3.4, which can be exploited by an attacker to gain access to an...
Secure Hub fails to authenticate with Citrix Gateway 13.0 83.27 when using an Advanced Authentication policy for LDAP
Secure Hub shows the following error when trying to connect to Citrix Gateway: "You may need to contact your administrator to verify your sign-on credentials". Closer inspection of network traffic through Citrix Gateway shows that there is no 'Set-Cookie' response found in the reply to "GET...
JetBrains Hub Cross-Site Scripting Vulnerability (CNVD-2022-17756)
JetBrains Hub is a web-based application from JetBrains Czech Republic. The application is able to integrate multiple JetBrains team tools together. JetBrains Hub has a cross-site scripting vulnerability that can be exploited by attackers to execute XSS attacks...
The vulnerability of the JEA (Just Enough Administration) security technology implementation in the hybrid cloud platform of Dell EMC Integrated System for Microsoft Azure Stack Hub allows a malicious individual to increase their privileges.
The vulnerability of the JEA Just Enough Administration security technology implemented on the Dell EMC Integrated System for Microsoft Azure Stack Hub hybrid cloud platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to increase their...
JetBrains Hub has an unspecified vulnerability (CNVD-2022-17757)
JetBrains Hub is a web-based application from JetBrains Czech Republic. The application is capable of integrating multiple JetBrains team tools together.A security vulnerability exists in versions prior to JetBrains Hub 2022.1.14434, which stems from allowing SAML requests to take over. No detail...
JetBrains Hub server-side request forgery vulnerability
JetBrains Hub is a web-based application from JetBrains Czech Republic. JetBrains Hub has a server-side request forgery vulnerability that stems from the software's lack of validation for request forgery, which can be exploited by attackers to conduct server-side request forgery SSRF attacks...
CVE-2022-25259
JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS...
CVE-2022-25260
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery SSRF...
CVE-2022-25260
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery SSRF...
CVE-2022-25260
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery SSRF...
CVE-2022-25259
JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS...
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...
CVE-2022-25259
JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS...
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible...
Cross site scripting
JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS...