1278 matches found
Parallels Remote Application Server Information Disclosure Vulnerability
Parallels Remote Application Server RAS is an application delivery and VDI Virtual Desktop Infrastructure solution from Parallels, Inc. in the United States. A security vulnerability exists in Parallels Remote Application Server that allows a remote attacker to discover an intranet IP address...
CVE-2020-35710: Exposure of Sensitive Information to an Unauthorized Actor
Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...
PT-2020-17399
Name of the Vulnerable Software and Affected Versions Parallels Remote Application Server RAS version 18 Description The issue allows remote attackers to discover an intranet IP address. This occurs because submission of the login form, even with blank credentials, provides the intranet IP addres...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-73178)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox, which stems from a stream-based technique that allows an attacker to obtain information about other hosts on the intranet of a local...
Mozilla Firefox 信息泄露漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox, which stems from a stream-based technique that allows an attacker to obtain information about other hosts on the intranet of a local...
SSRF Vulnerability in YzmCMS v5.8
YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS v5.8 suffers from an SSRF vulnerability. An attacker can exploit the vulnerability to probe intranet information and obtain...
Hcl Technologies Domino 跨站请求伪造漏洞
HCL Domino is a suite of enterprise-class application development platforms from HCL India. HCL Domino has a security vulnerability. An attacker can exploit the vulnerability by tricking a user into accessing the system using another ID, or accessing the internal system from the internet using th...
GaussDB Kernel: Configuring Node Connections in the pg_hba.conf File of DNs in the Cluster
Cluster nodes are deployed on the secure intranet. A DN allows communications only within the cluster. The pghba.conf file of a DN stores only configurations of intra-cluster node connections and trusted internal security connections. Copyright C 2020 Greenbone Networks GmbH Some text description...
openGauss: Configuring Node Connections in the pg_hba.conf File of the Database Node in openGauss
openGauss nodes are deployed on the secure intranet. Database nodes cannot be connected to or accessed through the internet. They can be connected only to nodes in the openGauss. The pghba.conf file of the database nodes stores only configurations of intra-openGauss node connections and trusted...
CVE-2020-28041
The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.6410.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs...
CVE-2020-28041
The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.6410.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs...
Design/Logic Flaw
The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.6410.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs...
intranet.site123.me Cross Site Scripting vulnerability OBB-1477688
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-28041
The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.6410.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs...
intranet.swisshockey.org Cross Site Scripting vulnerability OBB-1467292
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-16260
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation...
CVE-2020-16260
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation...
Authorization
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation...
CVE-2020-16260
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation...
CVE-2020-16260
The provided documents describe CVE-2020-16260 affecting Winston 1.5.4 devices, where authorization is not enforced. The vulnerability is indicated as exploitable from the intranet and capable of being combined with other vulnerabilities for remote exploitation. The descriptions do not specify ex...