548 matches found
jenkins: Diagnostic web page exposed Cookie HTTP header
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly...
Security Bulletin: One vulnerability of Mozzila Firefox (less than Firefox 60.7.1 ESR) has affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF07
Summary Synthetic Playback Agent has addressed the following vulnerabilities: CVE-2019-11707 Vulnerability Details CVEID: CVE-2019-11707 DESCRIPTION: A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. ...
Security Bulletin: One vulnerability of Mozzila Firefox (less than Firefox 60.7.2 ESR) has affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF07
Summary Synthetic Playback Agent has addressed the following vulnerabilities: CVE-2019-11708 Vulnerability Details CVEID: CVE-2019-11708 DESCRIPTION: Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed paren...
Security Bulletin: Multiple vulnerabilities of Mozzila Firefox (less than Firefox 68.2.0 ESR) have affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF09
Summary Synthetic Playback Agent has addressed the following vulnerabilities: CVE-ID: CVE-2019-11761,CVE-ID: CVE-2019-11762,CVE-ID: CVE-2019-11760,CVE-ID: CVE-2019-11763,CVE-ID: CVE-2019-11759,CVE-ID: CVE-2019-11757 Vulnerability Details CVEID: CVE-2019-11761 DESCRIPTION: CVSS Base score: 6.5 CVS...
LEADTOOLS BMP Parsing Remote Code Execution Vulnerability
Summary An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can cause an integer overflow, potentially resulting in code execution. An attacker can specially craft a BMP image to trigger this vulnerabilit...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4147-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4147-1 advisory. It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup TDLS. A physically...
USN-4115-1: Linux kernel vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this ...
Exploit for Cross-site Scripting in Crestron Am-100_Firmware
CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV Remote Comma...
CVE-2017-14394
OAuth 2.0 Authorization Server of ForgeRock Access Management OpenAM 13.5.0-13.5.1 and Access Management AM 5.0.0-5.1.1 does not correctly validate redirecturi for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect...
CVE-2017-14395
ForgeRock Access Management (OpenAM) 13.5.0–13.5.1 and Access Management (AM) 5.0.0–5.1.1 expose a vulnerability where redirect_uri is not properly validated for some invalid requests, enabling a reflected XSS to execute in the user’s browser. This CVE (CVE-2017-14395) is described in multiple so...
CVE-2017-14394
The CVE-2017-14394 affects ForgeRock OpenAM (OAuth 2.0 Authorization Server) versions 13.5.0–13.5.1 and Access Management (AM) 5.0.0–5.1.1. The issue is improper validation of redirect_uri for certain invalid requests, enabling phishing via an unvalidated redirect. The provided documents do not s...
CVE-2017-11740
In Zoho ManageEngine Application Manager 13.1 Build 13100, an administrative user can upload files/binaries that are executed when an alarm occurs. This allows an attacker to upload a malicious script that can be executed on the remote system, indicating a remote code execution risk via the uploa...
Rockwell Automation Kinetix 6000, 460VAC, AM, 49A/79A 2094-BM05
Binary data 753907.prm...
Rockwell Automation Kinetix 6200, 460Vac, AM, 34.6A, S0 Drive 2094-SE02F-M00S0/2094-BM05-M
Binary data 753935.prm...
Rockwell Automation Kinetix 6000, 230VAC, AM, 24A/49A 2094-AM03
Binary data 753901.prm...
Rockwell Automation Kinetix 6000, 460VAC, AM, 30A/45A 2094-BM03
Binary data 753906.prm...
Rockwell Automation Kinetix 6000, 460VAC, AM, 4A/6A 2094-BMP5
Binary data 753905.prm...
Rockwell Automation Kinetix 6000, 460Vac, AM, 21.2A, S1 Drive 2094-SE02F-M00S1/2094-BM03-M
Binary data 753944.prm...