484 matches found
Malicious code in frontend-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc9732e0fcece75477e2bb89d2951bd297a6886bbbd55d327a7e5e4e59a303c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3230 Malicious code in frontend-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc9732e0fcece75477e2bb89d2951bd297a6886bbbd55d327a7e5e4e59a303c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5341 Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc150e5ccb4209c706e7a4df2edfb54c9bbe1fc826a89a7bc5f011fe54676a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
IdeaRe SpA IdeaRE RefTree path traversal vulnerability
IdeaRe SpA IdeaRE RefTree is a web application for managing complex real estate situations from IdeaRe SpA, Italy. path traversal vulnerability exists in versions of IdeaRe SpA IdeaRE RefTree prior to 2021.09.17. The vulnerability stems from the failure of a web system or product to properly filt...
IdeaRe SpA IdeaRE RefTree File Upload Vulnerability
IdeaRe SpA IdeaRE RefTree is a web application for managing complex real estate situations from IdeaRe SpA in Italy.IdeaRe SpA IdeaRE RefTree versions prior to 2021.09.17 contain a file upload vulnerability that stems from a lack of valid validation of uploaded files by the application. An attack...
JVN#33214411: i-FILTER vulnerable to improper check for certificate revocation
i-FILTER provided by Digital Arts Inc. is vulnerable to improper check for certificate revocation CWE-299 . Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the software and add settings Update the software to the latest version...
ABB Relion 650 and 670 Series Improper Input Validation (CVE-2019-18247)
An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. This plugin only works with Tenable.ot. Please visit...
sharpimagesalonspa.ca Cross Site Scripting vulnerability OBB-2345740
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vintagehomespa.com Improper Access Control vulnerability OBB-2223809
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
seasons-spa.com Improper Access Control vulnerability OBB-2214312
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SPA Cart CMS 2021 SQL Injection
Document Title: =============== SPA Cart CMS - Multiple SQL Injection Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2304 Release Date: ============= 2021-10-18 Vulnerability Laboratory ID VL-ID: ====================================...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3179-1 Rating: important References: 1040364 1127650 1135481 1152489 1160010 1168202 1171420 1174969 1175052 1175543 1177399 1180100 1180141 1180347 1181006 1181148 1181972 1184180 1185902 1186264...
polynesianspa.co.nz Cross Site Scripting vulnerability OBB-2132812
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
VulnCheck KEV: CVE-2008-2551
The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...
Out-of-Bounds Read
Exim is vulnerable to out of bound read. The vulnerability exists due to the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c...
spa-huset.no Cross Site Scripting vulnerability OBB-1490987
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Timers, Metrics, and Dimensions: What's New in mPulse in 2020
The October 2020 release marks the culmination of a large number of updates to mPulse, Akamai's real user monitoring RUM solution: 8 New timers 2 New metrics 5 New dimensions UI improvements Extra custom timer capabilities With all of these new changes, you can easily determine and tune the...
The vulnerability of the auths/spa.c and auths/auth-spa.c components of the Exim mail server allows a hacker to gain access to confidential data.
The vulnerability of the auths/spa.c and auths/auth-spa.c components of the Exim mail server is related to reading data from buffers beyond their allowed limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
aromaticdayspa.com Cross Site Scripting vulnerability OBB-1216961
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...