9382 matches found
Remote Code Execution (RCE)
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.51. See the following advisory for the container...
Findomain - A Cross-Platform Tool That Use Certificate Transparency Logs To Find Subdomains
A cross-platform tool that use Certificates Transparency logs to find subdomains. We currently support Linux, Windows and MacOS. How it works? It tool doesn't use the common methods for subdomains discover, the tool uses Certificate Transparency logs to find subdomains and it method make it tool...
JeeWeb login logs have xss vulnerability
JeeWeb is an agile development system based on SpringBoot 2 + Spring + Mybatis + Hibernate . An xss vulnerability exists in the JeeWeb login log, which can be exploited by an attacker to obtain an administrator cookie...
The vulnerability of the mydlink web interface of D-Link routers allows a hacker to obtain DNS query logs and user login logs.
The vulnerability of the D-Link microprogrammed router’s web interface function “mydlink” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain DNS query logs and user login logs by sending specially crafted...
CVE-2019-6158
An internal product security audit of Lenovo XClarity Administrator LXCA discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x...
Information Disclosure
admin-cli in Red Hat JBoss Enterprise Application Platform is vulnerable to information disclosure. This vulnerability exists due to EAP feature to download server log files that allows logs to be available via GET requests causing cross-origin attacks. An attacker could trigger the user's browse...
Information Disclosure
The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. A flaw was found in the way 389 Directory Server handled password changes. If an LDAP user has changed thei...
CVE-2019-4047
IBM Jazz Reporting Service JRS 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243...
Workspace App Android "restoring data connection" message when EDT is enabled
On the GUI we see a "restoring data connection" message but the connection is not restored. This happens when EDT is enabled viaHDXoverUDP=preferred Studio Policy and NetScaler DTLS enabled setting if connecting from outside the network. On the logs we might see similar messages as the following:...
Security update for libvirt (important)
openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2019:1288-1 Rating: important References: 1081516 1102604 1104662 1106420 1108086 1108395 1112182 1117058 1118952 1120813 1123642 1124667 1125665 1126325 1127458 1130129 Cross-References: CVE-2019-3840 Affected...
CVE-2019-11492
ProjectSend before r1070 writes user passwords to the server logs...
Code injection
ProjectSend before r1070 writes user passwords to the server logs...
CVE-2019-11492
CVE-2019-11492 affects ProjectSend before release r1070, where user passwords are written to server logs. This creates exposure of credentials via log data. According to NVD, the CVSS metrics indicate a network-accessible issue with low attack complexity and a medium (CVSS2) to high (CVSS3) base ...
CVE-2019-11492
ProjectSend before r1070 writes user passwords to the server logs...
Multiple VPN applications insecurely store session cookies
The Missing Encryption Of Sensitive Data vulnerability in FortiClient may allow an attacker to access VPN session cookie from an endpoint device running FortiClient. The attacker can steal the cookies only if endpoint device has been compromised in such a way that the attacker has access to...
UBUNTU-CVE-2015-1343
All versions of unity-scope-gdrive logs search terms to syslog...
CVE-2015-1343 unity-scope-gdrive search feature logs search terms to syslog
All versions of unity-scope-gdrive logs search terms to syslog...
Findomain - A Tool That Use Certificate Transparency Logs To Find Subdomains
A tool that use Certificates Transparency logs to find subdomains. How it works? It tool doesn't use the common methods for subdomains discover, the tool uses Certificate Transparency logs to find subdomains and it method make it tool very faster and reliable. If you want to know more about...
[SECURITY] Fedora 28 Update: osbs-client-0.52-2.fc28
It is able to query OpenShift v3 for various stuff related to building imag es. It can initiate builds, list builds, get info about builds, get build logs. .. This package contains osbs command line client...