EUVD-2018-8015

Malware in sbrugna...

EUVD-2018-8016

Malware in sbrugna...

EUVD-2018-8017

Malware in sbrugna...

CVE-2018-16161

OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations...

CVE-2018-16162

OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors...

CVE-2018-16163

OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors...

CVE-2018-16161

OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations...

CVE-2018-16162

OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors...

CVE-2018-16163

OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors...

Code injection

OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations...

Authentication flaw

OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors...

Default credentials

OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors...

CVE-2018-16161

OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations...

CVE-2018-16162

OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors...

CVE-2018-16163

OpenDolphin 2.7.0 and earlier versions are affected by CVE-2018-16163, an authentication bypass that allows an authenticated attacker to create and/or delete other user accounts via unspecified vectors. The issue impacts the OpenDolphin component responsible for access control and user management...

CVE-2018-16163

OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors...

CVE-2018-16161

OpenDolphin (OpenDolphin 2.7.0 and earlier) is affected by CVE-2018-16161, a privilege-escalation vulnerability that allows an authenticated user to gain administrative privileges and perform unintended operations. The vulnerability is confirmed across multiple sources (NVD entry CVE-2018-16161) ...

CVE-2018-16162

CVE-2018-16162 affects OpenDolphin, versions 2.7.0 and earlier. The vulnerability allows authenticated attackers to obtain other users’ credentials (e.g., user IDs and passwords) through unspecified vectors, resulting in information disclosure with partial to high impact on confidentiality and, p...

OpenDolphin Elevation of Privilege Vulnerability

OpenDolphin is a free open source library that protects business applications from changing visualization technologies. An elevation of privilege vulnerability exists in OpenDolphin, which could allow a user to perform unintended actions with administrative privileges...

OpenDolphin Information Disclosure Vulnerability

OpenDolphin is a free open source library that protects business applications from changing visualization technologies. OpenDolphin suffers from an information disclosure vulnerability that could be exploited by an attacker to gain access to sensitive information about other users, such as IDs an...