987 matches found
UBUNTU-CVE-2016-1657
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
chromium-browser: address bar spoofing
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
Moodle Design Vulnerability (CNVD-2016-01812)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Moodle version 2.8.x before 2.8.11. An attacker cou...
CVE-2016-1341
Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...
CVE-2016-1341
Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...
CVE-2016-1341
Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...
CVE-2016-1341: Undefined Security Weakness
Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...
PT-2018-12657
Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description An issue was discovered in mspack/chmd.c where it does not reject blank CHM filenames. Recommendations For versions prior to 0.7alpha, update to version 0.7alpha or later to resolve the issue. A...
Security fix for the ALT Linux 8 package dhcpcd version 1:6.10.1-alt1
Jan. 25, 2016 Mikhail Efremov 1:6.10.1-alt1 - Patches from upstream: + Don't allow blank hostname. + Fix CVE-2014-7913. - Drop obsoleted patch. - Updated to 6.10.1...
CVE-2016-0019
The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...
CVE-2016-0019: Undefined Security Weakness
The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...
PT-2016-1044
Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to a security feature bypass in the Remote Desktop Protocol RDP service implementation, allowing remote attackers to bypass intended access restrictions. This can...
CVE-2015-5988
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
Session fixation
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
PT-2015-7098
Name of the Vulnerable Software and Affected Versions Belkin F9K1102 version 2.10.17 Description The web management interface has a blank password, allowing remote attackers to obtain administrative privileges by leveraging a LAN session. Recommendations For Belkin F9K1102 version 2.10.17, consid...
CVE-2015-5988: Undefined Security Weakness
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
HackerOne: Know whether private program for company exist or not
HI, There are some company which are hosting private BB on HackerOne which are not visible unless they invite you. However, you can check if any company is hosting private BB on HackerOne or not if you can guess the username they use. Generally most company chooses the same name as their company...
USN-2703-1: Cinder vulnerability
Bastian Blank discovered that Cinder guessed image formats based on untrusted data. An attacker could use this to read arbitrary files from the Cinder host...
PT-2015-4751
Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue arises from the Authentication Proxy feature in Cisco IOS not properly handling invalid AAA return codes from RADIUS and TACACS+ servers. This allows remote attackers to bypass...
EDVAS blank template pre 3.5.1
Blank bootstrap edition Template : Update Details http://github.com/Bloggerschmidt/Blank-Bootstrap-Edition/releases/tag/v3.5.1 See https://github.com/Bloggerschmidt/Blank-BootstrapEdition...