4597 matches found
The vulnerability of the corporate platform Red Hat OpenShift Container Platform allows a hacker to redirect network traffic.
The vulnerability of the Red Hat OpenShift Container Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to redirect network traffic...
The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to upload arbitrary files onto the AIIS server.
The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to the AIIS server using a specially created POST request...
PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services
Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure. Conditions required for exploitati...
The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to perform cross-site scripting attacks (XSS).
The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of Microsoft Word for Android, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Word for Android text editor is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Telerik UI for ASP.NET AJAX Cryptographic Weakness
According to its self-reported version number, the version of Telerik UI for ASP.NET is affected by a cryptographic weakness. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists through a security mitigation bypass weakness...
The vulnerability of the Microsoft SharePoint Server software allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PYSEC-2020-250
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...
The vulnerability of the AJP Connector service of the Apache Tomcat application server allows a hacker to gain unauthorized access to read files within web applications.
The vulnerability of the AJP Connector service of the Apache Tomcat application server is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized read access to files within the web applications...
Header leakage on cross-domain redirects
This version fixes a security weakness that might leak sensitive request headers from the initial request to the redirected host on cross-domain redirects, which were not removed correctly. Message::setHeaders does not replace the entire set of headers, but only operates on the headers matching t...
chromium-browser: Insufficient policy enforcement in enterprise
Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions...
passivehouse-database.org Cross Site Scripting vulnerability OBB-1192129
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lehmann-rotary-tables.com Cross Site Scripting vulnerability OBB-1191979
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
IBM Security Guardium Encryption Issue Vulnerability
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from a cryptographic issue vulnerability...
The vulnerability of the Absence Management component of the Oracle PeopleSoft Enterprise HCM application allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Absence Management component of the Oracle PeopleSoft Enterprise HCM application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...
The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle MySQL database management system allows a attacker to cause a service failure or gain unauthorized access to protected information.
The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service failures or gain unauthorized access to protected information...
CloudBees Jenkins Self-Organizing Swarm Plug-in Modules Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Self-Organizing Swarm Plug-in Modules Plugin is a plug-in that supports the...
