1709 matches found
openssl security, bug fix, and enhancement update
1.1.1g-11 - Further changes for SP 800-56A rev3 requirements 1.1.1g-9 - Rewire FIPSdrbg API to use the RANDDRBG - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters 1.1.1g-7 - Disallow dropping Extended Master Secret extension on renegotiation - Return alert from sserver if...
AMI MegaRAC SP-X BMC Vulnerability - Lenovo Support US
No description provided...
www2.hortolandia.sp.gov.br Improper Access Control vulnerability OBB-1477813
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sp-secure.co.uk Cross Site Scripting vulnerability OBB-1474261
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
observatorio.jundiai.sp.gov.br Cross Site Scripting vulnerability OBB-1457120
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sp-werdenberg.ch Cross Site Scripting vulnerability OBB-1456200
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Zoho ManageEngine Desktop Central Input Validation Error Vulnerability
ZOHO ManageEngine Desktop Central DC and Desktop Central DC are both products of ZOHO, Inc. ManageEngine Desktop Central is a desktop management solution. ManageEngine Desktop Central is a desktop management solution that includes software distribution, patch management, system configuration,...
cmsandre.sp.gov.br Cross Site Scripting vulnerability OBB-1409957
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pontodigital.jau.sp.gov.br Cross Site Scripting vulnerability OBB-1397646
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
shibboleth-sp.prod.proquest.com Open Redirect vulnerability OBB-1355573
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sp-march.com Cross Site Scripting vulnerability OBB-1315798
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
BlockDev Sp. Z o.o: A specially crafted value for the 'Cache-Digest' header causing crash in chat.makerdao.com
A specially crafted value for the 'Cache-Digest' header causing crash...
escoladafamilia.fde.sp.gov.br Cross Site Scripting vulnerability OBB-1285046
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
casaempreendedor.osasco.sp.gov.br Cross Site Scripting vulnerability OBB-1285019
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
camaraicem.sp.gov.br Cross Site Scripting vulnerability OBB-1240784
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14204
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
microcode_ctl security, bug fix and enhancement update
3:1.17-33.26.0.1 - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - merge Oracle changes for early load via dracut - enable late load on install for UEK4 kernels marked safe except BDW-79 - set earlymicrocode='no' in virtualized guests to avoid early load...
PT-2020-11592
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises in the crus sp shared ioctl function where 4 bytes from user data are copied into the size variable. This variable is then used as the size parameter for copy from user, resulting in the overwrite of...
BlockDev Sp. Z o.o: Email HTML injection
Email HTML injection...
Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...