7329 matches found
Security Bulletin: Multiple security vulnerabilities in IBM® Java SDK Oct 2019 and Jan 2020 CPU have been identified in Jazz Team Server shipped with Jazz Reporting Service
Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilitiesin IBM® Java SDK Oct 2019 and Jan 2020 CPU affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details Refer...
Windows Error Reporting Manager Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
formenteraappartamenti.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159446 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
KB4551853: Windows 10 Version 1809 and Windows Server 2019 May 2020 Security Update
The remote Windows host is missing security update 4551853. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...
Analyzing Dark Crystal RAT, a C# Backdoor
The FireEye Mandiant Threat Intelligence Team helps protect our customers by tracking cyber attackers and the malware they use. The FLARE Team helps augment our threat intelligence by reverse engineering malware samples. Recently, FLARE worked on a new C variant of Dark Crystal RAT DCRat that the...
dda-web.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1156374 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dda-web.de website and...
Citrix ShareFile storage zones Controller multiple security updates
Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...
abzonlineshop.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1155240 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting abzonlineshop.com website...
chilligarlicandme.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153905 Security Researcher Dipu1A Helped patch 998 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting chilligarlicandme.com websit...
uminho.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153686 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting uminho.pt website and its...
az-deutschland.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1153364 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting az-deutschland.com...
SQL Injection Vulnerability in ar***.aspx Page of Qixing Fault Reporting System
Qixing Fault Reporting System is a platform based on ASP.NET language to help organizations to report faults. A SQL injection vulnerability exists in the ar.aspx page of the Qixing Fault Reporting System, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Ca***.aspx Page of Qixing Fault Reporting System
Qixing Fault Reporting System is a platform based on ASP.NET language to help organizations to report faults. A SQL injection vulnerability exists in the Ca.aspx page of the Qixing Fault Reporting System, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in the frontend Ti***_ne***.aspx page of Qixing Trouble Repair System
Qixing Fault Reporting System is a platform based on ASP.NET language to help organizations to report faults. A SQL injection vulnerability exists in the frontend Tine.aspx page of the Qixing Fault Reporting System, which can be exploited by attackers to obtain sensitive information from the...
homing.com.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1150663 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting homing.com.pt website and i...
Critical: Red Hat Bug Fix Advisory: Red Hat Ansible Tower 3.6.4-1 - RHEL7 Container
Red Hat Ansible Tower 3.6.4-1 - RHEL7 Container Added additional metrics to the Prometheus /api/v2/metrics/ endpoint for reporting remaining instance capacity Fixed Tower to allow users to subscribe to playbook output in organizations they do not have RBAC access to via Towers websocket interface...
California Needlessly Reduces Privacy During COVID-19 Pandemic
This one isn't even related to contact tracing: On March 17, 2020, the federal government relaxed a number of telehealth-related regulatory requirements due to COVID-19. On April 3, 2020, California Governor Gavin Newsom issued Executive Order N-43-20 the Order, which relaxes various telehealth...