Lucene search
+L

11808 matches found

Citrix
Citrix
added 2023/08/28 12:00 a.m.11 views

"Unable to process your request" error while registering for two-factor authentication

Registerfor two-factor authentication by using the following steps: ------- 1. Open a browser, navigate to the Workspace sign-in page, and select Don’t have a token? 2. Enter their user name in the domain\username format or their company email address and select Next. Citrix Cloud then sends the...

7.6AI score
SaveExploits0
NVD
NVD
added 2023/08/25 5:15 p.m.40 views

CVE-2023-38201

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimat...

6.5CVSS6.5AI score0.0049EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/08/25 5:15 p.m.26 views

CVE-2023-38201

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimat...

6.5CVSS6.5AI score0.0049EPSS
SaveExploits0References5
Prion
Prion
added 2023/08/25 5:15 p.m.21 views

Design/Logic Flaw

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimat...

3.3CVSS6.3AI score0.0049EPSS
SaveExploits0References6Affected Software9
Cvelist
Cvelist
added 2023/08/25 4:15 p.m.58 views

CVE-2023-38201 Keylime: challenge-response protocol bypass during agent registration

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimat...

6.5CVSS6.6AI score0.0049EPSS
SaveExploits0References5
CVE
CVE
added 2023/08/25 4:15 p.m.133 views

CVE-2023-38201

CVE-2023-38201 is a vulnerability in Keylime's registrar where the challenge-response during agent registration can be bypassed, enabling impersonation of an agent and potentially compromising the integrity of the registrar database. Reported across multiple advisories (e.g., ALSA-2023:5080, ELSA...

6.5CVSS6.4AI score0.0049EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2023/08/25 1:15 p.m.31 views

CVE-2023-41250

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

6.1CVSS4.9AI score0.00366EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/25 1:15 p.m.7 views

CVE-2023-41250

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

6.1CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/25 1:15 p.m.24 views

Design/Logic Flaw

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

5.8CVSS6AI score0.00366EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/25 12:58 p.m.15 views

CVE-2023-41250

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

3.5CVSS6.1AI score0.00366EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/25 12:58 p.m.31 views

CVE-2023-41250

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

3.5CVSS6.1AI score0.00366EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/25 12:58 p.m.66 views

CVE-2023-41250

JetBrains TeamCity servers prior to 2023.05.3 are affected by a reflected XSS during user registration. The flaw is a reflected cross-site scripting vulnerability in the registration flow; exploitation requirements and precise vectors are not detailed in the provided documents. Impact is disclose...

6.1CVSS6AI score0.00366EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/25 9:06 a.m.31 views

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

4.3CVSS8.4AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/25 9:06 a.m.65 views

CVE-2023-4478

Mattermost is affected by CVE-2023-4478 due to improper handling of signup request parameters, allowing an attacker to register users as inactive and thereby block future access unless an admin activates the accounts. The issue stems from the system’s failure to restrict which request parameters ...

8.2CVSS6AI score0.00504EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/25 9:06 a.m.11 views

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

4.3CVSS7.1AI score0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/25 12:00 a.m.12 views

PT-2025-53172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/iommu subsystem related to the sharing of notifiers between PCI and VIO buses. The fail iommu setup function registers the fail iommu bus...

4.6CVSS6.5AI score0.00158EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.23 views

Keylime 安全漏洞

Keylime is an open source extensible trust system for Keylime that utilizes TPM technology. A security vulnerability exists in Keylime that stems from a vulnerability that could allow bypassing the Poll Response Protocol during agent registration...

6.5CVSS6.3AI score0.0049EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.11 views

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A cross-site scripting vulnerability exists in JetBrai...

6.1CVSS5.9AI score0.00366EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/25 12:00 a.m.10 views

PT-2023-27870 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.3 Description: The issue allows for reflected XSS during user registration. Recommendations: For versions prior to 2023.05.3, update to version 2023.05.3 or later to resolve the issue...

6.1CVSS6AI score0.00366EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.14 views

Mattermost 注入漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to limit the parameter values taken from requests during registration, allowing an attacker to register a user as inactive...

8.2CVSS7.7AI score0.00504EPSS
SaveExploits0References2
Rows per page
Query Builder