Code injection

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs...

Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

GHSA-W736-HF9P-QQH3 Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

Netapp OnCommand System Manager Security Vulnerability

Netapp OnCommand System Manager is a suite of storage management tools from NetApp Netapp, USA. The tool supports simplifying, controlling and automating the setup and ongoing management of NetApp storage systems. Security vulnerabilities in Netapp OnCommand System Manager versions prior to 9.3P2...

CVE-2020-4640

Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make u...

Apache Traffic Control Access Control Error Vulnerability

Apache Traffic Control is the United States Apache Apache Foundation's set of distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. A security vulnerability exists in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0,...

The vulnerability in the implementation of the fetch() function for obtaining resources from the Fetch API interface of Mozilla Firefox and Firefox-ESR browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the fetch function for obtaining resources through the Fetch API on Mozilla Firefox and Firefox-ESR browsers is related to an error in returning temporary local copies of resources. These resources were sent with a cache header indicating “no caching”...

The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2020-28473

The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon ;, they can cause a difference in the interpretation of the request between the proxy running with...

UBUNTU-CVE-2020-28473

The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon ;, they can cause a difference in the interpretation of the request between the proxy running with...

CVE-2020-15218

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, admin pages are cached, so that their content is visible after deconnection by using the browser back button. This is fixed in versions 2.7.2 and 3.0.0...

Design/Logic Flaw

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, admin pages are cached, so that their content is visible after deconnection by using the browser back button. This is fixed in versions 2.7.2 and 3.0.0...

CVE-2020-15218

Combodo iTop is affected prior to versions 2.7.2 and 3.0.0 where admin pages are cached, allowing content to be visible after a user navigates back. This is fixed in 2.7.2 and 3.0.0. The provided data indicates partial confidentiality impact with a MEDIUM/LOW severity depending on vector, and no ...

CVE-2021-1659

Windows CSC Service Elevation of Privilege Vulnerability...

PT-2021-1603 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's CSC service. It allows an attacker to potentially elevate their privileges. Recommendations: At...

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and editions are affected:Windows 10 Version 1607 for 32-bit...

PT-2021-1601 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows CSC service, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling t...