3735 matches found
USN-4377-1 ca-certificates update
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA. In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package...
career1.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1172331 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
OpenSSL Vulnerabilities Sep 2019 – Apr 2020
Summary Symantec Web Security Group WSG products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A local or remote attacker can obtain private key or other secret key information. A remote attacker can also cause denial of service. Affected Products The followin...
Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...
legacy.411.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1156202 Security Researcher virbhushanprab1 Helped patch 9 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting legacy.411.ca website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...
python-urllib3: Certification mishandle when error should be thrown
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use o...
SQL Injection Vulnerability in Ca***.aspx Page of Qixing Fault Reporting System
Qixing Fault Reporting System is a platform based on ASP.NET language to help organizations to report faults. A SQL injection vulnerability exists in the Ca.aspx page of the Qixing Fault Reporting System, which can be exploited by attackers to obtain sensitive information from the database...
benefitsfinder.services.gc.ca Open Redirect vulnerability
Open Bug Bounty ID: OBB-1146158 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting benefitsfinder.services.gc.ca website and its users...
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action...
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action...
CVE-2020-11658
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization...
Authorization
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization...
Improper access control
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...
CVE-2020-11660
Technical details about CVE-2020-11660 are not publicly available in the provided documents beyond the general description of an access control flaw. Monitor for updates from vendors and security advisories to obtain specifics about affected versions, impact, and remediation.
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action...
CVE-2020-11659
CVE-2020-11659 affects CA API Developer Portal (Broadcom) 4.3.1 and earlier. The connected sources consistently describe an access-control flaw that lets privileged users perform a restricted user administration action, indicating a privilege-escalation risk affecting the portal’s admin functiona...
CVE-2020-11658
CVE-2020-11658 affects the Broadcom/CA API Developer Portal (versions 4.3.1 and earlier). The root cause is insecure handling of shared secret keys, which can let an attacker bypass authorization. The issue is classified with high to critical impact (CVSS scores: CVSS v3.1 base 9.8, HIGH confiden...