1828 matches found
dspace.zsmu.edu.ua Cross Site Scripting vulnerability OBB-2136876
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dspace.zsmu.edu.ua ---|--- Open Bug...
com.adrianhurt:play-bootstrap3_2.10 (0.4.4-p23), com.adrianhurt:play-bootstrap3_2.11 (0.4.4-p23) +91 more potentially affected by CVE-2021-37137 via io.netty:netty (3.9.8.final)
io.netty:netty MAVEN version 3.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.adrianhurt:play-bootstrap32.10 0.4.4-p23 - com.adrianhurt:play-bootstrap32.11 0.4.4-p23 -...
Arbitrary File Download Vulnerability in Reporter Component of Shanghai Newshield Technology Co.
Ltd. "Newshield" was founded in 2009 in Shanghai, is a "network security" as the main axis, to "make the network more secure" for the It is a professional security company with the main axis of "network security" and the mission of "making the network more secure" to provide customers with total...
CVE-2021-22244
Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data...
CVE-2021-22244
Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data...
Weak Password Vulnerability in Reporter System of Shanghai Newton Technology Co.
Ltd. is a professional security company with "network security" as its main axis and "making the network safer" as its mission to provide customers with total network security solutions. Ltd. Reporter system has a weak password vulnerability, which can be used by attackers to log into the system...
A command execution vulnerability exists in the Reporter system of Fujian Strait Information Technology Co.
Ltd. is a state-controlled high-tech enterprise engaged in technical research, product sales, information security services and other businesses in the field of network security technology. Ltd. Reporter system there is a command execution vulnerability, attackers can use the vulnerability to...
China Aims Its Propaganda Firehose at the BBC
The alleged digital operation has deployed hundreds of websites and social media accounts to attack the broadcaster's reporting...
Operation Bridge Reporter Code Execution
The vulnerability of the IT reporting software Operation Bridge Reporter OBR is related to the improper processing of parameters at the final login point. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2021-2460
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
CVE-2021-2460
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
CVE-2021-2460
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
Oracle Database Server has an unspecified vulnerability (CNVD-2022-09809)
Oracle Database Server is a relational database management system from Oracle Corporation. A security vulnerability exists in the Oracle Application Express Data Reporter component of Oracle Database Server versions prior to 21.1.0.00.04, which could be exploited by an attacker to cause...
Apple macOS Big Sur: Input validation vulnerability
Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided to users in Crash Reporter. The vulnerability allows local users to elevate privileges...
CVE-2021-2460
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
CVE-2021-2460
CVE-2021-2460 affects Oracle Database Server's Oracle Application Express Data Reporter component, with versions prior to 21.1.0.00.04 affected. The vulnerability allows a low-privileged attacker with a valid user account and network access over HTTP to compromise Data Reporter, requiring user in...
CVE-2021-2460
Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...
Oracle Database Server input validation error vulnerability
Oracle Database Server is a relational database management system from Oracle Corporation. A security vulnerability exists in the Oracle Application Express Data Reporter component of Oracle Database Server versions prior to 21.1.0.00.04, which could be exploited by an attacker to cause...