8330 matches found
Courier: SSO Provider Credential Cache (logged out of Google/GitHub, could still log into Courier)
After researching this further, our authentication provider Amazon's AWS Cognito caches the access token provided by Google, GitHub, and other SSO providers within their system for up to an hour and does not check against the SSO provider's API again until that cache has expired. We did verify th...
Moderate Photon OS Security Update - PHSA-2020-0295
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0245
An update of 'linux-aws', 'linux-secure' packages of Photon OS has been released...
CVE-2020-9409
The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...
PT-2020-20641 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +2
Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server versions 7.1.1 and below TIBCO JasperReports Server for AWS Marketplace versions 7.1.1 and below TIBCO JasperReports Server for ActiveMatrix BPM versions 7.1.1 and below Description: The administrative UI component ...
Ubuntu: Security Advisory (USN-4367-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2020-3.0-0093
Updates of 'json-c', 'linux-aws', 'linux', 'git', 'linux-secure', 'linux-esx', 'glibc', 'ntp' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-0093
Updates of 'json-c', 'glibc', 'ntp', 'git', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...
USN-4364-1: Linux kernel vulnerabilities
It was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel did not properly deallocate memory in certain error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2019-19060 It was discovered that the vhost net driver in the Linux kernel...
Weaponizing AWS ECS Task Definitionsto Steal Credentials From Running Containers
The post Weaponizing AWS ECS Task Definitions to Steal Credentials From Running Containers appeared first on Rhino Security Labs...
PT-2020-4877 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +5
Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Library versions 7.1.1 and below, 7.2.0, 7.2.1, 7.3.0, 7.5.0 TIBCO JasperReports Library for ActiveMatrix BPM versions 7.1.1 and below TIBCO JasperReports Server versions 7.1.1 and below, 7.2.0, 7.5.0 TIBCO JasperReports...
Ubuntu: Security Advisory (USN-4363-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4364-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kubernetes: Internal IP addresses range and AWS cluster region leaked in a Github repository
Report Submission Form Summary: I was exploring the GitHub repository and found some internal IP address and its cluster region related to AWS cluster. So i decided to report it to you. Please have a look and let me know. Steps To Reproduce: VISIT THIS LINK : Repository - kubernetes / kubernetes...
Topcoder: SSRF at https://cognitive.topcoder.com leads to AWS instance metadata due to vulnerable email subscription feature
Summary: Topcoder makes use of Amazons AWS in their web application environment. I noticed a feature that allows a user to subscribe and receive emails from Topcoder. This feature is vulnerable to server side request forgery since it allows a user to supply an arbitrary URL which the application...
Mail.ru: [my.games] Stored XSS via untrusted bucket
Domain, site, application -- https://my.games/ Details -- If you check page source of https://my.games, you can notice that site gets static files scripts, styles, images using following URL declaration: https://my.games/hotbox/mygames/frontend/v3-6-13/img/share/main.png mygames here is a name of...
CVE-2020-5574
HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...
PT-2020-18549
Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 7.2.1 Movable Type Advanced versions prior to 7.2.1 Movable Type for AWS versions prior to 7.2.1 Movable Type 6.5 versions prior to 6.5.3 Movable Type Advanced 6.5 versions prior to 6.5.3 Movable Type 6.3 version...
CVE-2020-5574: Improper Neutralization of Special Elements in Output Used by a Downstream Component
HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...