88 matches found
CVE-2018-4217: Exposure of Sensitive Information to an Unauthorized Actor
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
Design/Logic Flaw
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory /include/logs using predictable file names, which can lead to full path disclosure and leakage of sensitive data...
CVE-2018-15684
CVE-2018-15684 concerns BTITeam XBTIT where PHP error logs are stored in an open directory (/include/logs) with predictable filenames, enabling full path disclosure and leakage of sensitive data. The vulnerability is described across multiple sources (NVD/NVD-variants) indicating exposure of log ...
Jetty 6.1.6 Cross Site Scripting Vulnerability
Exploit for jsp platform in category web applications Title: Jetty 6.1.6 Cross-Site Scripting Author: email protected - https://crowdshield Software Link: http://www.mortbay.org/jetty/ Tested on: Jetty 6.1.6 other versions may also be vulnerable CVE: N/A Background: Jetty 6.1.6 is vulnerable to...
Jetty 6.1.6 Cross Site Scripting
Title: Jetty 6.1.6 Cross-Site Scripting Date: 8/14/2018 Author: 1N3@CrowdShield - https://crowdshield Software Link: http://www.mortbay.org/jetty/ Tested on: Jetty 6.1.6 other versions may also be vulnerable CVE: N/A Background: Jetty 6.1.6 is vulnerable to Cross-Site Scripting XSS which allows a...
CVE-2018-14785
NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication...
CVE-2015-1147
Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...
Open redirect
Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-1147
CVE-2015-1147 concerns Open Directory Client in Apple OS X prior to 10.10.3. The issue involves unencrypted password-change requests under certain conditions with missing certificates, enabling remote attackers to sniff and obtain sensitive data. The description does not specify affected versions...
CVE-2015-1147
Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...
Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-004. It is, therefore, affected multiple vulnerabilities in the following components : - Apache - ATS - Certificate Trust Policy - CoreAnimation - FontParser - Graphics Driver - ImageIO -...
CVE-2015-1147: Exposure of Sensitive Information to an Unauthorized Actor
Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...
Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)
The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...
Apple Mac OS X Using Open Directory Plaintext Password Delivery Vulnerability
Apple Mac OS X is an operating system developed by Apple Inc. When the Apple Mac OS X service binds an Open Directory client but fails to install an OS X server certificate, the client sends password changes in clear text, which can be exploited by remote attackers to obtain sensitive information...
Open redirect
The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5979
CVE-2014-5979 affects the TV Bengali Open Directory (com.TVBengali) Android app version 1.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The...
CVE-2014-5979
The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5979: Undefined Security Weakness
The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. OpenVAS Vulnerability Test $Id: gbmacosxsu11-006.nasl 7029 2017-08-31 11:51:40Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-006 Authors: Rachana Shetty Copyright:...