The vulnerability of the electronic interaction module of service and official personnel of the “Safe City” hardware-programming platform, related to deficiencies in authentication mechanisms, allows a violator to identify all existing user names.

The vulnerability of the electronic interaction module of the “Safe City” hardware-programming platform relates to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to determine all existing user names by using a brute-force method on the username...

Magento Marketplace Suffers Data Breach Exposing Users' Account Info

If you have ever registered an account with the official Magento marketplace to bought or sold any extension, plugin, or e-commerce website theme, you must change your password immediately. Adobe—the company owning Magento e-commerce platform—today disclosed a new data breach incident that expose...

Information Disclosure Vulnerability in Multiple Cisco Products (CNVD-2019-44128)

Cisco Webex Meeting Center is an online collaborative videoconferencing solution from Cisco.Cisco Webex Event Center is a webinar and online event management platform.Cisco Webex Support Center is a videoconferencing solution for service support teams. Cisco Webex Event Center is a webinar and...

CVE-2019-5643

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation...

CVE-2019-5643

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation...

CVE-2019-5643 C4G BLIS Improper Access Control

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation...

Infosysta In-App&Desktop Notification for Jira Information Disclosure Vulnerability

Infosysta In-App&Desktop Notification for Jira is an email notification plugin for the Jira defect tracking management system from Infosysta Lebanon. An information disclosure vulnerability exists in Infosysta In-App&Desktop Notification for Jira version 1.6.13J8, which can be exploited by an...

[SECURITY] [DSA 4545-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4545-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 18, 2019 https://www.debian.org/security/faq -...

CentOS Web Panel Information Disclosure Vulnerability (CNVD-2019-41837)

CentOS Web Panel CWP is a free web hosting control panel. An information disclosure vulnerability exists in CentOS Web Panel version 0.9.8.848, which can be exploited by an attacker to check the validity of a user's name by comparing response times...

CVE-2019-0346

Unencrypted communication error in SAP Business Objects Business Intelligence Platform Central Management Console, version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure...

CVE-2019-0346

Unencrypted communication error in SAP Business Objects Business Intelligence Platform Central Management Console, version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure...

Ziggy's Fortress has an information leakage vulnerability

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. An information leakage vulnerability exists in Qiji Fortress, which can be exploited by an attacker to obtain confidential information suc...

Flipboard Database Hacked — Users' Account Information Exposed

Flipboard, a popular social sharing and news aggregator service used by over 150 million people, has disclosed that its databases containing account information of certain users have been hacked. According to a public note published yesterday by the company, unknown hackers managed to gain...

Hackers Breach Stack Overflow Q&A Site, Some Users' Data Exposed

Note: We have updated this story to reflect new information after Stack Overflow changed its original announcement and shared more details on the security incident. Stack Overflow, one of the largest question and answer site for programmers, revealed today that unknown hackers managed to exploit ...

Arbitrary Code Execution

GNU C Library is vulnerable to arbitrary code execution. A remote unauthenticated attacker could cause a buffer overflow during unescaping of user names with the operator resulting in denial of service conditions and code execution attacks...

Information Disclosure

Oracle Java SE is vulnerable to information disclosure . This is because the LDAP component of OpenJDK fails to properly encode special characters in user names when adding them to an LDAP search query. Remote attackers could possibly use this flaw to manipulate LDAP queries performed by the...

Unauthorized Access Vulnerability in Paradis Fortress Interface

Hangzhou Paradis Network Technology Co., Ltd. is a network security product manufacturer that provides enterprise "human-machine" interactive operation and maintenance platform and enterprise "application" overall delivery solutions. An unauthorized access vulnerability exists in the interface of...

openSUSE Security Update : slurm (openSUSE-2019-521)

This update for slurm to version 17.11.7 fixes the following issues : This security issue was fixed : - CVE-2018-10995: Ensure correct handling of user names and group ids bsc1095508. These non-security issues were fixed : - CRAY - Add slurmsmwd to the contribs/cray dir - PMIX - Added the direct...

Linux: Duplicated user names

Duplicated user names can be created with modify Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Information leakage vulnerability in SiloCms website builder system

Chengdu Silo Technology Co., Ltd. is an Internet infrastructure service provider in Chengdu. An information leakage vulnerability exists in the Silo cms website builder system. The vulnerability can be exploited by attackers to obtain user name and password information...