Red Hat Keycloak Cross-Site Scripting Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A cross-site scripting vulnerability exists in Red Hat keycloak versions prior to 9.0.0. The vulnerability stems from a lack of proper...

Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2020-14237)

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A cross-site scripting vulnerability exists in Cloudera Manager versions prior to 5.4.3. The vulnerability stems from the WEB...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

WiKID Systems 2FA Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2019-43369)

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server 4.2.0-b2047 and prior versions. The vulnerability stems from a WEB application lacking proper authentication of client data...

WiKID Systems 2FA Enterprise Server Cross-Site Scripting Vulnerability (CNVD-2019-43370)

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A cross-site scripting vulnerability exists in WiKID 2FA Enterprise Server 4.2.0-b2047 and prior versions. The vulnerability stems from a WEB application lacking proper authentication of client data...

CVE-2019-12505

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-12504

CVE-2019-12504 concerns the Inateck WP2002 2.4 GHz wearable wireless presenter. The connected documents confirm a vulnerability in data authenticity (CWE-345) where data from the receiver is not adequately validated, enabling keystroke injection attacks. The description notes unencrypted and unau...

CVE-2019-12505

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

GOG Galaxy Denial of Service Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. A denial of service vulnerability exists in GOG Galaxy that originates from a networked system or product that does not properly authenticate incoming data. An attacker could exploit the vulnerability to...

CVE-2018-12188

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access...

HP ERK-321A Wireless Mouse Spoofing Vulnerability

The HP ERK-321A is a wireless desktop device consisting of a mouse and keyboard. A spoofing vulnerability exists in the HP ERK-321A Wireless Mouse, which can be exploited by an attacker to launch a mouse spoofing attack due to unencrypted and unauthenticated mouse data communication...

Apple iOS AppleUSBNetworking Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of AppleUSBNetworking in versions prior to iOS 9.3, due to a failure to authenticate data from USB devices...

DLA-53-1 apt - security update

Bulletin has no description...

Debian DSA-2261-1 : redmine - several vulnerabilities

Joernchen of Phenoelit discovered several vulnerabilities in Redmine, a project management web application : - Logged in users may be able to access private data. - The Textile formatter allowed for cross site scripting, exposing sensitive data to an attacker. - The Bazaar repository adapter coul...