5781 matches found
Fedora 29 : python-markdown2 (2018-6a8028084d)
python-markdown2 2.3.6 - pull 282 Add TOC depth option - pull 283 Fix to add TOC html to output via CLI - pull 284 Do not remove anchors in safemode - pull 288 fixing cuddled-lists with a single list item - pull 292 Fix Wrong rendering of last list element - pull 295 link-patterns fix - pull 300...
CVE-2018-20402
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the...
CVE-2018-20402
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the...
Privilege escalation
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the...
CVE-2018-20402
CVE-2018-20402 affects Safe Software FME Server up to version 2018.1. The vulnerability enables three additional accounts (guest, user, author) in addition to the initial administrator, with passwords equal to their usernames. Logging in with these accounts grants the corresponding default privil...
Kaspersky: Web protection component in Anti-Virus products family uses predictable links for certificate warnings
Summary Websites can predict links used in certificate warnings, Safe Money prompts, anti-phishing warnings and similar pages. This allows them to initiate actions without the user's knowledge. Description The links used to override certificate warnings have the following format: https:///?kiscup...
Kaspersky: Certificate warnings and similar UI elements in Web protection of Anti-Virus products family are susceptible to clickjacking
Summary Clickjacking can be used to trick users into overriding certificate warnings, disabling Safe Money functionality or phishing alerts. Description On certificate warning pages, a single click is sufficient to trigger overriding a wrong certificate. While an additional warning is displayed...
'prvProcessICMPPacket' Function Information Disclosure Vulnerability in Multiple Products
AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...
'prvCheckOptions' function information disclosure vulnerability in multiple products
AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...
CVE-2018-18362
Technical details about CVE-2018-18362 are not publicly available in the provided connected documents. The description notes an XSS issue in Norton Password Manager for Android but does not disclose affected versions, exploit details, or remediation. Monitor for updates.
UBUNTU-CVE-2018-6152
The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted...
The Mueller Investigation May Be Safe Despite Matt Whitaker
Robert Mueller's work as special counsel may seem imperiled by the acting attorney general, but there's plenty of reason for optimism...
tomas.by XSS vulnerability
Open Bug Bounty ID: OBB-684185 Description| Value ---|--- Affected Website:| tomas.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
October is National Cybersecurity Awareness Month
October is National Cybersecurity Awareness Month NCSAM. NCSAM is a collaborative effort between DHS and its public and private partners—including the National Cyber Security Alliance NCSA—to raise awareness about the vital role cybersecurity plays in the lives of U.S. citizens. NCCIC will be...
BullGuard Safe Browsing Cross-Site Scripting Vulnerability
BullGuard Safe Browsing is a secure browser from BullGuard UK. A cross-site scripting vulnerability exists in BullGuard Safe Browsing version 18.1.355. The vulnerability can be exploited by a remote attacker to execute JavaScript code from a domain name indexed in search results...
CVE-2018-17061
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
Cross site scripting
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
CVE-2018-17061
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
CVE-2018-17061
CVE-2018-17061 affects BullGuard Safe Browsing prior to version 18.1.355.9. The vulnerability is a cross-site scripting (XSS) issue that can be triggered on Google, Bing, and Yahoo! pages through domains indexed in search results. The connected CNVD/NVD entries confirm the vulnerable component an...
