666 matches found
Unspecified vulnerability in slpjs
slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. A security vulnerability exists in versions of slpjs prior to 0.27.2 that can be exploited by an attacker to prevent users from generating tokens tokens...
slp-validate Input Validation Error Vulnerability
slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. an input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...
slpjs Input Validation Error Vulnerability
slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. slpjs A vulnerability exists in input validation errors in versions prior to 0.21.4. The vulnerability stems from a network system or product that does not properly validate input data. An attacker could...
The vulnerability of the Account Hierarchy Manager component of the Oracle General Ledger software, a business automation system within the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected data.
The vulnerability of the Account Hierarchy Manager component of the Oracle General Ledger software, a part of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
Ledger SAS Ledger Monero app information disclosure vulnerability
Ledger SAS Ledger Monero app is an application for Ledger eWallet device management from Ledger SAS, France. A security vulnerability exists in the Ledger SAS Ledger Monero app versions prior to 1.5.1 for Ledger Nano and Ledger S devices. An attacker could exploit the vulnerability by sending a...
CVE-2020-6861
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...
CVE-2020-6861
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...
Design/Logic Flaw
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...
CVE-2020-6861
Ledger Monero app (before version 1.5.1) on Ledger Nano/S is affected by a flaw in the protocol design that lets a local attacker obtain the master spending key by sending specially crafted messages to the app on a PIN-entered Ledger connected to a host PC. Affected component: Ledger Monero app; ...
CVE-2020-6861
A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...
slp-validate Input Validation Error Vulnerability
slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. An input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...
Unspecified Vulnerability in Simple Ledger Electron-Cash-SLP
Simple Ledger Electron-Cash-SLP is a suite of SLP e-wallet implementations from Simple Ledger that supports creating, burning, and sending SLP tokens, among other things. A security vulnerability exists in Simple Ledger Electron-Cash-SLP versions prior to 3.6.2, which can be exploited by attacker...
Oracle E-Business Suite General Ledger Unauthorized Access Vulnerability
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. general Ledger is one of the...
CVE-2020-2750
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2750
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Design/Logic Flaw
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2750
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2750
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2750
The CVE-2020-2750 entry concerns Oracle E-Business Suite General Ledger, specifically the Account Hierarchy Manager component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is described as easily exploitable with unauthenticated network access via HTTP, allowing access ...
49 New Google Chrome Extensions Caught Hijacking Cryptocurrency Wallets
Google has ousted 49 Chrome browser extensions from its Web Store that masqueraded as cryptocurrency wallets but contained malicious code to siphon off sensitive information and empty the digital currencies. The 49 browser add-ons, potentially the work of Russian threat actors, were identified fi...