CVE-2019-13599

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times...

CVE-2019-13599

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times...

CVE-2019-13360

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username...

CVE-2019-13383

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response...

Authentication flaw

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username...

CVE-2019-13383

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response...

CVE-2019-13605

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

PT-2019-4353 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.846 Description: The issue is related to the login process in CentOS Web Panel, which allows attackers to determine whether a username is valid by analyzing the HTTP response. This is due to a lack of protection...

Dropbox desktop application information disclosure vulnerability

Dropbox desktop application is an open source, cross-platform file online storage, synchronization, and sharing application from Dropbox, Inc. A security vulnerability exists in the Dropbox desktop application version 71.4.108.0, which originates from the Dropbox.exe file and the...

ALPINE-CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent, arises from password handling issues during system login processes. This allows attackers to compromise the protected information.

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent are related to password handling deficiencies during system login processes. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that ...

PT-2019-2458 · Intel · Open Cloud Integrity Technology

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology. This may allow an authenticated user to...

Multiple vulnerabilities in GROWI

Overview GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Cross-site request forgery vulnerability in the process of updating user's "Basic Info" CWE-352 - CVE-2019-5968 Open redirect vulnerability in the process of login CWE-601 - CVE-2019-5969 Security Group of...

Session fixation vulnerability in GitHub Authentication Plugin

GitHub Authentication Plugin did not invalidate the previous session and create a new one upon successful login, allowing attackers able to control or obtain another user's pre-login session ID to impersonate them. GitHub Authentication Plugin now invalidates the previous session during login and...

reagentproteins.com XSS vulnerability

Open Bug Bounty ID: OBB-690617 Description| Value ---|--- Affected Website:| reagentproteins.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

caning-on-demand.com XSS vulnerability

Open Bug Bounty ID: OBB-681942 Description| Value ---|--- Affected Website:| caning-on-demand.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tipsy.pl XSS vulnerability

Open Bug Bounty ID: OBB-595267 Description| Value ---|--- Affected Website:| tipsy.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plastic-optom.ru XSS vulnerability

Open Bug Bounty ID: OBB-567217 Description| Value ---|--- Affected Website:| plastic-optom.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

CVE-2017-15290

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...

Design/Logic Flaw

Mirasys Video Management System VMS 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the client functionality...