193 matches found
GHSA-PV88-89RQ-9FG6 Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin
A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server...
GHSA-9FPQ-V2P3-W63J Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.relutionpublisher.configuration.global.StoreConfiguration.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins...
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.relutionpublisher.configuration.global.StoreConfiguration.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins...
siemens Mendix Forgot Password Appstore module access control impropriety vulnerability (CNVD-2022-17796)
Forgot Password module allows users to register applications or reset their own passwords without administrator involvement. siemens Mendix Forgot Password Appstore module contains a security vulnerability that could be exploited by an attacker to hijack any user account using the registration fl...
CVE-2022-26314
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...
CVE-2022-26313
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...
CVE-2022-26314
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...
CVE-2022-26313
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...
Design/Logic Flaw
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...
CVE-2022-26314
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...
CVE-2022-26314
CVE-2022-26314 affects the Mendix Forgot Password Appstore module: affected versions are Mendix Forgot Password Appstore v3.3.0–v3.5.1 and Mendix 7 compatible versions prior to v3.2.2. The root cause is improper restriction of excessive authentication attempts, enabling unauthenticated brute-forc...
CVE-2022-26313
The CVE-2022-26313 entry concerns the Mendix Forgot Password Appstore module, affected in all versions 3.3.0 through 3.5.1. Multiple sources (Red Hat CVE, ICSA, CNVD, CNNVD, etc.) describe an Improper Access Control flaw in which a threat actor could hijack arbitrary user accounts via the sign-up...
CVE-2022-26313
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...
CVE-2022-26314: Improper Restriction of Excessive Authentication Attempts
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...
CVE-2022-26313: Improper Access Control
A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...
PT-2022-17782
Name of the Vulnerable Software and Affected Versions Mendix Forgot Password Appstore module versions 3.3.0 through 3.5.0 Mendix Forgot Password Appstore module Mendix 7 compatible versions prior to 3.2.2 Description A security issue has been found where initial passwords are generated in an...
Nextcloud Server shipped insecure Archive_Tar version
None...
Vivo appstore input validation error vulnerability
Vivo AppStore is a mobile app from China Vivo. It is used to download APP. A security vulnerability exists in appstore versions prior to 8.12.0.0, which can be exploited by an attacker to remotely download and install apps via carefully constructed parameters...
