14612 matches found
Yokogawa CENTUM (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: CENTUM Vulnerabilities: Improper Authentication, Path Traversal 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-224-01...
Cisco Data Center Network Manager SQL Injection (cisco-sa-dcnm-sql-inject-8hk6PwmF)
According to its self-reported version, Cisco Data Center Network Manager is affected by a SQL injection vulnerability due to improper validation of user-supplied input. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected...
vam.ac.uk Cross Site Scripting vulnerability OBB-1252335
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
HPESBUX04025 rev.1 - HP-UX Secure Shell Daemon, Multiple Remote Vulnerabilities
Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Arbitrary File Modification, Authentication Bypass, Authorized User SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i Secure Shell Software A.07.40.003 and earlier are impacted CVSS...
NetWalker Ransomware Rakes in $29M Since March
The NetWalker ransomware has been around for about a year, but it has really made a name for itself in 2020, racking up around $29 million in extortion gains just since March. First detected in August 2019, NetWalker lingered around before surging in use in March through June, according to an...
Foxit PhantomPDF < 10.0.1 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...
XSS vulnerability in Linqing AYi Network Technology website building system
Linqing City, A Yi network technology is committed to website construction services. Linqing City, A easy network technology station building system there are XSS vulnerabilities, attackers can take advantage of the vulnerability to obtain sensitive information such as user cookies...
Take a "NetWalk" on the Wild Side
ARCHIVED STORY Take a “NetWalk” on the Wild Side ATR Operational Intelligence Team · AUG 03, 2020 · 25 MIN READ Executive Summary The NetWalker ransomware, initially known as Mailto, was first detected in August 2019. Since then, new variants were discovered throughout 2019 and the beginning of...
ASB-A-150697811
Bulletin has no description...
ASB-A-147102225
Bulletin has no description...
ASB-A-147104231
Bulletin has no description...
ASB-A-147104726
Bulletin has no description...
ASB-A-145546313
Bulletin has no description...
kolczykowo.pl Cross Site Scripting vulnerability OBB-1244779
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cisco Unity Connection Cross-Site Scripting (cisco-sa-cucm-cuc-imp-xss-OWuSYAp)
According to its self-reported version, Cisco Unity Connection is affected by a Cross-Site Scripting vulnerabilities. An remote attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful exploit could allow the attacker to...
Rocky Enterprise Software Foundation OpenStack Platform 16.1 bug fix and enhancement advisory
An update is available for python-gflags, python-oauth2client, google-api-python-client, python-httplib2, python-uritemplate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
a-base.de Cross Site Scripting vulnerability OBB-1241361
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Photon OS 3.0: Mysql PHSA-2020-3.0-0118
An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0118. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139043;...
Photon OS 1.0: Mysql PHSA-2020-1.0-0309
An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139049...
Cisco Data Center Network Manager XSS (cisco-sa-dncm-xss-AvMyAwd2)
According to its self-reported version, Cisco Data Center Network Manager is affected by multiple vulnerabilities. Please see the included Cisco BID and Cisco Security Advisory for more information. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid139007;...