4527 matches found
October 1, 2019, update for Office 2016 (KB4475585)
None None...
SQL Injection Vulnerability in the Basic Website of Shenzhen Tiandixin Network Technology Co.
Founded in 2010, Tiandixin Network is an enterprise mainly focusing on corporate website construction, Baidu home page natural ranking, domain name registration, space rental, enterprise post office, 400 telephone, corporate VI design, electronic album production and other services. The basic...
The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the default use of the HTTP protocol, allows attackers to intercept administrator credentials and other confidential information, thereby gaining access to the control system.
The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the default use of the HTTP protocol in implementing the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to remotely intercept administrator...
The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to intercept administrator credentials and other confidential information, gaining access to the control system.
The vulnerability of the embedded web-server microprogramming system controllers from Moxa, models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660, stems from the default use of the HTTP protocol during the implementation of the “Basic HTTP Authentication” method. Exploiting this vulnerability...
squid: heap-based buffer overflow in HttpHeader::getAuth
A flaw was discovered in Squid versions 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data but does not check that the decoded length is not greater than the buffer. This flaw leads to a heap-based buffer overflow...
CVE-2019-13423
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...
The vulnerability of VBScript script handlers in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created web page or document...
CVE-2019-15806
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basicsett.html. Any user connected to the Wi-Fi can exploit this...
Credentials Management
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components such as kube-apiserver which make use of basic or bearer token authentication, and run at high verbosity...
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: August 16, 2019
Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: August 16, 2019 Summary This non-security update for Windows 7 SP1 and Windows Server 2008 R2 SP1 includes the quality improvements from KB4512486 released August 16, 2019, in addition to these key changes: Addresses an issue in which the...
CVE-2019-13423
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...
Authentication flaw
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...
Cisco Adaptive Security Appliance VPN SAML Authentication Bypass Vulnerability (cisco-sa-20190501-asaftd-saml-vpn)
According to its self-reported version the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an authentication bypass vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 Single Sign-On SSO for Clientless SSL VPN WebVPN and...
Update for Windows 8.1 and Windows Server 2012 R2: August 16, 2019
Update for Windows 8.1 and Windows Server 2012 R2: August 16, 2019 Summary This non-security update for Windows 8.1 and Windows Server 2012 R2 includes the quality improvements from KB4512489 released August 16, 2019, in addition to these key changes: Addresses an issue in which the following may...
August 17, 2019—KB4517276 (OS Build 10240.18308)
None None...
August 13, 2019—KB4512491 (Security-only update)
None None...
August 13, 2019—KB4512489 (Security-only update)
None None...
August 13, 2019—KB4512497 (OS Build 10240.18305)
None None...