PT-2018-18787

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description An input validation issue allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update crld script. Recommendations For CA Privileged Access...

PT-2018-18793

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description The issue is related to improper input validation, allowing remote attackers to conduct SQL injection attacks. This enables attackers to potentially extract or modify sensitive data from th...

CVE-2018-9028: Inadequate Encryption Strength

Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking...

PT-2018-18792

Name of the Vulnerable Software and Affected Versions CA Privileged Access Manager versions 2.x Description The issue is related to weak cryptography used for passwords, which reduces the complexity for password cracking. Recommendations For CA Privileged Access Manager versions 2.x, update to a...

CVE-2018-9024: Improper Authentication

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file...

Sslmerge - Tool To Help You Build A Valid SSL Certificate Chain From The Root Certificate To The End-User Certificate

Is an open source tool to help you build a valid SSL certificate chain from the root certificate to the end-user certificate. Also can help you fix the incomplete certificate chain and download all missing CA certificates. How To Use It's simple: Clone this repository git clone...

mastercalendar.sanjoseca.gov XSS vulnerability

Open Bug Bounty ID: OBB-629036 Description| Value ---|--- Affected Website:| mastercalendar.sanjoseca.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora Update for ca-certificates FEDORA-2018-6d91fc0518

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ca-certificates FEDORA-2018-ed35b82337

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : ca-certificates (2018-ed35b82337)

This is an update to version 2.24 of the Mozilla CA trust list, which has been published as part of the NSS 3.37 release. Please refer to the upstream release notes for the changes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.37 releasenotes Note that Tenable Network Securi...

[SECURITY] Fedora 28 Update: ca-certificates-2018.2.24-1.0.fc28

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 27 Update: ca-certificates-2018.2.24-1.0.fc27

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

sunshine89.ca XSS vulnerability

Open Bug Bounty ID: OBB-622378 Description| Value ---|--- Affected Website:| sunshine89.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mix1065.ca XSS vulnerability

Open Bug Bounty ID: OBB-622372 Description| Value ---|--- Affected Website:| mix1065.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CA Spectrum Denial of Service Vulnerability

CA Spectrum formerly known as CA Spectrum Infrastructure Manage is a set of converged infrastructure management software developed by CA. The software provides fault management, application performance management and failure cause analysis and other functions. A security vulnerability exists in C...

Design/Logic Flaw

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum vulnerability CVE-2018-6589 affects CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3. The issue allows remote attackers to cause a denial of service via unspecified vectors. The connected sources specify remediation: upgrade to CA Spectrum 10.01.02.PTF_10.1.2...