1267 matches found
BELL-CVE-2007-6762 CVE-2007-6762 does not affect BellSoft software
Bulletin has no description...
Compatibility update for installing Windows 10, version 1809: June 18, 2019
None None...
Exploit for Cross-site Scripting in Astaro Security_Gateway_Software
This is the central place for my security advisories. Also publi...
Compatibility update for upgrading to Windows 10, version 1703: April 25, 2019
None None...
Open Redirect
doorkeeper-openidconnect is vulnerable to open redirect. The attack exists because it does not filter redirecturi in OAuth authorization request when handling custom parameters, causing an error response with the openid scope and a prompt=none value...
Design/Logic Flaw
Doorkeeper::OpenidConnect aka the OpenID Connect extension for Doorkeeper 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirecturi field in an OAuth authorization request that results in an error response with the 'openid' scope and a prompt=none value. This allows phishing attacks...
BELL-CVE-2019-7222 CVE-2019-7222 does not affect BellSoft software
Bulletin has no description...
Compatibility update for upgrading to Windows 10, version 1809: January 22, 2019
None None...
ThinkPHP 5.X - Remote Command Execution
Exploit Title: thinkphp 5.X RCE Date: 2019-1-14 Exploit Author: vrsystem Vendor Homepage: http://www.thinkphp.cn/ Software Link: http://www.thinkphp.cn/down.html Version: 5.x Tested on: windows 7/10 CVE : None https://github.com/SkyBlueEternal/thinkphp-RCE-POC-Collection...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24267)
Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software.Applications Manager is one of the components used to monitor the performance and availability of Oracle application servers. A security vulnerability exists in the None subcomponent...
Servicing stack update for Windows 10, version 1803: September 11, 2018
None None...
CVE-2018-14374
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2018-1000531
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header usi...
Design/Logic Flaw
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header usi...
CVE-2018-1000531
The vulnerability CVE-2018-1000531 affects inversoft prime-jwt prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba, where JWTDecoder.decode can mishandle signature verification (CWE-20). An attacker can craft a JWT with a valid header using the none algorithm and a body that passes validatio...
CVE-2018-1000531
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header usi...
CVE-2018-1000531: Improper Input Validation
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header usi...
Servicing stack update for Windows 10 Version 1703: May 17, 2018
None None...
Denial Of Service (DoS) Through Out-of-Bounds (OOB) Read
libtiff.so is vulnerable to denial-of-service DoS through out-of-bound OOB read. The vulnerability exists in the DumpModeEncode function in tifdumpmode.c, only when the -c none option is used, and allows attackers to cause a denial of service DoS attack when parsing a malicious BMP image...