6808 matches found
CVE-2019-18917: Improper Restriction of Excessive Authentication Attempts
A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...
all-good-food.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1116532 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-good-food.ru website a...
CVE-2020-6196
SAP BusinessObjects Mobile MobileBIService, version 4.2, allows an attacker to generate multiple requests, using which he can block all the threads resulting in a Denial of Service...
UBUNTU-CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
PT-2020-19237
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 74 Description A issue exists where a Web Extension with the all-urls permission can read local files when making a fetch request with a mode set to 'same-origin'. Recommendations For versions prior to 74, update to...
all-fonts.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1112133 Security Researcher geeknik Helped patch 8781 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-fonts.ru website and i...
Fedora 31 : sudo (2020-8b563bc5f4)
update to latest development version 1.9.0b1 - added sudologsrvd and sudosendlog to files and their appropriate man pages Resolves: rhbz1787823 - Stack based buffer overflow in when pwfeedback is enabled Resolves: rhbz1796945 - fixes: CVE-2019-18634 - By using ! character in the shadow file...
Security Bulletin: IBM® Db2® is vulnerable to denial of service (CVE-2020-4161)
Summary Db2 is vulnerable to a denial of service. Authenticated users can use specific commands on a Db2 server to cause the server to terminate abnormally Vulnerability Details CVEID: CVE-2020-4161 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an...
CVE-2020-5957
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...
The vulnerability of the sudoer account in the Runas ALL system administration software allows a hacker to disable user authentication using a local password.
The vulnerability of the sudoer account in the Runas ALL system administration program is related to improper access control. Exploiting this vulnerability could allow a malicious actor to disable user authentication using the local password...
The vulnerability of the sudoer account in the Runas ALL system administration software allows a hacker to impersonate an existing user.
The vulnerability of the sudoer account in the Runas ALL system administration program is related to improper access control. Exploiting this vulnerability allows a malicious actor to impersonate an existing user...
Cross site scripting
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...
CVE-2019-12513 Stored XSS via DHCP Discover Request Hostname
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...
Security Bulletin: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for Corporate Services (CVE-2019-4732)
Summary There is vulnerability in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Corporate Services. Financial Transaction Manager for Corporate Services FTM CPS has addressed the applicable CVE.brIf you run your own Java code using the IBM Java Runtime deliver...
Rabid - A CLI Tool And Library Allowing To Simply Decode All Kind Of BigIP Cookies
RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI @noraj...
CVE-2019-6190
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...
PT-2020-11195
Name of the Vulnerable Software and Affected Versions Lenovo Desktop, Desktop - All in One, and ThinkStation BIOS affected versions not specified Description A potential denial of service issue affects various versions of BIOS for Lenovo products, including Desktop, Desktop - All in One, and...
CVE-2013-5988
A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...