CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2013-2120

CVE-2013-2120 affects the KDE Paste Applet in kdeplasma-addons up to version prior to 4.10.5 . The vulnerability stems from the %{password(...)} macro in pastemacroexpander.cpp, which does not generate passwords securely, allowing context-dependent attackers to bypass authentication via a brute-f...

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2013-2213: Use of a Broken or Risky Cryptographic Algorithm

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output...

CVE-2013-2120: Improper Authentication

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

PT-2020-7386

Name of the Vulnerable Software and Affected Versions: kdeplasma-addons versions after 4.10.5 Description: The issue concerns the KRandom::random function in the KDE Paste Applet, which utilizes the GNU C Library rand function's linear congruential generator. This makes it easier for attackers to...

Thinkphp5 applet one-click generation platform has file upload vulnerability

Thinkphp5 small program one-click generation platform is a small program one-click generation system source code. A file upload vulnerability exists in Thinkphp5 Applet One Click Generation Platform. An attacker can exploit this vulnerability to upload a webshell and gain server privileges...

CVE-2016-6154

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...

Open redirect

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...

CVE-2016-6154

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...

PT-2019-7837

Name of the Vulnerable Software and Affected Versions Watchguard Fireware version 11.11 Description The issue concerns a reflected XSS in the authentication applet, which can also lead to an open redirect. Recommendations For Watchguard Fireware version 11.11, consider disabling the authenticatio...

CVE-2016-6154: Improper Neutralization of Input During Web Page Generation

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...

AxiomSL Axiom Google Web Toolkit Module Security Vulnerability

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

AxiomSL Axiom Google Web Toolkit module security vulnerability (CNVD-2019-42884)

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

AxiomSL Axiom java applet module security vulnerability

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

CVE-2015-5463

CVE-2015-5463 affects AxiomSL’s Axiom java applet module (used for editing uploaded Excel files and related Java RMI services) version 9.5.3 and earlier. The connected documents corroborate multiple dangerous impacts: remote attackers can (1) access data of other basic users via arbitrary SQL com...

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

CVE-2015-5463: Improper Authorization

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...