1320 matches found
The vulnerability of the “mlx5_fw_fatal_reporter_dump()” function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the “mlx5fwfatalreporterdump” function in the Linux operating system is related to an uncontrolled resource consumption resource exhaustion. Exploiting this vulnerability could allow a attacker to cause a service failure...
syrianpioneers.org.sy Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164684 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
PT-2020-15193 · Apache · Apache Flink
Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.1.0 through 1.1.5 Apache Flink versions 1.2.0 through 1.2.1 Apache Flink versions 1.3.0 through 1.3.3 Apache Flink versions 1.4.0 through 1.4.2 Apache Flink versions 1.5.0 through 1.5.6 Apache Flink versions 1.6.0...
kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c
A flaw was found in the way the Mellanox 5th generation network adapters ConnectX series core driver in the Linux kernel handled resource cleanup in the mlx5fwfatalreporterdump function. This flaw allows an attacker with the ability to trigger errors in the mlx5crdumpcollect function to crash the...
Apple macOS Catalina Crash Reporter Component Input Validation Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.Crash Reporter is one of the error reporting components. A security vulnerability exists in the Crash Reporter component in Apple macOS Catalina versions prior to 10.15.3. The vulnerability can be exploite...
About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra
About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra This document describes the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. About Apple security updates F...
vskidku.kz Cross Site Scripting vulnerability
Security Researcher error404 Helped patch 520 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting vskidku.kz website and its users. Following coordinated an...
72nnv.pw Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1013957 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Rudy Giuliani Butt-Dialed a Reporter (Twice!)
A UN phishing attack, Adobe accounts exposed, and more of the week's top security news...
Apple macOS Catalina Crash Reporter Component Competitive Conditions Issue Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.Crash Reporter is one of the error reporting components. A competitive conditions issue vulnerability exists in the Crash Reporter component in Apple macOS Catalina versions prior to 10.15. An attacker cou...
HackerOne: Reporter, external users, collaborators can mark sent swag awarded to reporter as unsent
An Insecure Direct Object Reference IDOR vulnerability allow the reporter, external users, and collaborators to mark sent swag that was awarded to the reporter as unsent. This may result in swag being sent multiple times. Proof of concept Follow the steps below to reproduce the vulnerability. sig...
CVE-2019-12753
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The maliciou...
CVE-2019-12753
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The maliciou...
Information disclosure
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The maliciou...
Symantec (Blue Coat) Reporter UI Information Disclosure Vulnerability (SYMSA1489)
According to its self-reported version number, the Symantec formerly Blue Coat Reporter installation running on the remote host is 10.3 prior to 10.3.2.5. It is, therefore, affected by an information disclosure vulnerability. An authenticated attacker with Reporter UI access can obtain passwords...
CVE-2019-12753
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The maliciou...
CVE-2019-12753
Symantec (Blue Coat) Reporter UI information disclosure CVE-2019-12753 affects Reporter UI 10.3 prior to 10.3.2.5. An authenticated administrator can retrieve passwords for external SMTP/FTP/FTPS/LDAP and Cloud Log Download servers, as well as passwords of other Reporter UI users. Root cause is i...
Information Disclosure Vulnerability in Reporter
SUMMARY The Symantec Reporter web UI is susceptible to an information disclosure vulnerability. A malicious authenticated Reporter administrator user can obtain passwords for external servers that they might not otherwise be authorized to access. The malicious user can also obtain the passwords o...
Atlassian Jira Privilege Bypass Vulnerability
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A privilege bypass vulnerability exists in Atlassian Jira versions prior to 7.12.3, which can be exploited by an attacker to set...