10318 matches found
CVE-2019-7417
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
CVE-2019-6716
An unauthenticated Insecure Direct Object Reference IDOR in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs backup and synchronization jobs, which could...
CVE-2019-6716
An unauthenticated Insecure Direct Object Reference IDOR in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs backup and synchronization jobs, which could...
Cross site request forgery (csrf)
An unauthenticated Insecure Direct Object Reference IDOR in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs backup and synchronization jobs, which could...
Exploit for Command Injection in Rubyonrails Rails
CVE-2019-5420 CVE-2019-5420 Ruby on Rails For educational p...
Exploit for Link Following in Microsoft
Security Research for FUN All focused on Microsoft Windows OS...
Intel Active Management Technology Denial of Service Vulnerability
Intel Active Management Technology AMT is an embedded system from the U.S. company Intel Intel that is integrated into the Intel chip and uses active management technology. A security vulnerability exists in Intel AMT that originates from the program not performing sufficient input validation. An...
rdesktop out-of-bounds read vulnerability (CNVD-2019-07808)
rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability in the processdemandactive function in rdesktop 1.8.3 and earlier versions can be exploited by an attacker to cause a denial of service...
Intel Converged Security and Management Engine Intel AMT Arbitrary Code Execution Vulnerability
The Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation, USA.Intel AMT is one of the active management technology modules. A security vulnerability exists in Intel AMT in Intel CSME, which arises from the program failing to perform sufficient...
CVE-2019-6716
The CVE-2019-6716 issue affects LogonBox Limited/Nervepoint Access Manager (versions 1.2–1.4-RG3; 2013–2017) where an unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core enables an attacker to enumerate internal Active Directory usernames and group names and to alter back-end j...
CVE-2019-6716
An unauthenticated Insecure Direct Object Reference IDOR in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs backup and synchronization jobs, which could...
Lenovo Patches Intel Firmware Flaws in Multiple Product Lines
Lenovo has patched several several high-severity vulnerabilities tied to Intel flaws that could enable escalation of privilege, information disclosure, or even denial of service. Overall the device maker patched flaws tied to 16 high-severity CVEs on Thursday. Those include five related to Intel...
DEBIAN-CVE-2018-20178
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function processdemandactive that results in a Denial of Service segfault...
UBUNTU-CVE-2018-20178
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function processdemandactive that results in a Denial of Service segfault...
CVE-2018-12196
Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access...
CVE-2018-12187
Insufficient input validation in IntelR Active Management Technology IntelR AMT before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access...
CVE-2018-12185
Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access...
CVE-2018-12187
CVE-2018-12187 : Indicated as insufficient input validation in Intel® AMT (part of Intel CSME/Server Platform Services/TXE) before 11.8.60, 11.11.60, 11.22.60 or 12.0.20, potentially allowing an unauthenticated user to cause a denial of service via network access. Connected documents corroborate ...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
No description provided...
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the elevation of privilege vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary An elevation of privilege vulnerability exists in Active Directory Forest trusts because of a default setting that lets an attacker in the trusting forest...