CVE-2020-23283

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

CVE-2020-23283

CVE-2020-23283 affects MV mConnect application v02.001.00 and enables information disclosure on the login page, allowing an attacker to determine valid users from the application’s database via brute force. Red Hat and other connected records corroborate the logon-page information disclosure; CNN...

PT-2021-10874

Name of the Vulnerable Software and Affected Versions mConnect application version v02.001.00 Description The issue allows an attacker to use a non-existing user with a generic password to connect to the application and gain access to unauthorized information through SQL injection in the Logon...

PT-2021-10875

Name of the Vulnerable Software and Affected Versions mConnect application version v02.001.00 Description The issue allows an attacker to discover valid users from the application's database through brute force. This is due to information disclosure in the Logon Page of the mConnect application...

CVE-2020-23282: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information...

CVE-2020-23283: Improper Restriction of Excessive Authentication Attempts

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

CVE-2021-2442: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

PT-2021-6832

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.25 and prior Description The issue is related to the InnoDB component of the MySQL Server product, allowing a high-privileged attacker with logon to the infrastructure where MySQL Server executes to compromise the...

PT-2021-6564 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.24 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to...

CVE-2021-2353: Undefined Security Weakness

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM component: Loging. Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework...

WEM Transformer: SSON is not working

If attempting to log on to WEM transformer via SSO with an individual user account, SSO does not work, the user needs to re-enter their credentials to logon to workspace...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

PT-2021-21261

Name of the Vulnerable Software and Affected Versions Edifecs Transaction Management versions prior to 2021-07-12 Description The issue allows an unauthenticated user to inject arbitrary text into a user's browser via the "logon.jsp?logon error=" parameter on the login screen of the Web...

CVE-2021-34546

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

CVE-2021-34546

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

Design/Logic Flaw

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

Apple macOS 授权问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An authorization issue vulnerability exists in Apple macOS, which can be exploited by a local attacker to bypass the "Logon to Windows" protection screen and gain unauthorized access to the system. The...

libdb: Denial of service in the Data Store component

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

UBUNTU-CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...