Integrating mPulse’s Beacon API with EdgeWorkers to Visualize All Client Requests

Akamai mPulse combines with Akamai EdgeWorkers to visualize any client request and uses its http-request module to let users send their own requests...

Dell DM5500 cross-site scripting vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...

CVE-2023-4252

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment...

CVE-2023-39930

CVE-2023-39930 describes a first-factor authentication bypass in PingFederate with PingID Radius PCV triggered by a maliciously crafted RADIUS MSCHAP authentication request. The impact stated across sources is a bypass of the first factor, potentially affecting authentication integrity and access...

CVE-2023-39930 PingFederate PingID Radius PCV Authentication Bypass

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

CVE-2023-39930: Authentication Bypass Using an Alternate Path or Channel

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

PT-2023-27162 · Ping Identity · Pingfederate

Name of the Vulnerable Software and Affected Versions: PingFederate with PingID Radius PCV affected versions not specified Description: A first-factor authentication bypass issue exists when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request. This allows for...

Design/Logic Flaw

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

Denial Of Service (DoS)

NPTD is vulnerable to Denial Of Service DoS. The vulnerability is due when the server is not NTS-enabled no certificate, an attacker can submit a NTS-enabled client request, resulting in a server crash...

PT-2023-4983

Name of the Vulnerable Software and Affected Versions ntpd versions affected versions not specified Description The issue is related to the implementation of the Network Time Protocol NTP and specifically affects ntpd when it receives an NTS-enabled client request mode 3 without being NTS-enabled...

NTPsec Security Vulnerabilities

NTPsec is a more secure NTP. A security vulnerability exists in NTPsec that stems from the fact that ntpd may crash when NTS is disabled and an NTS-enabled client request mode 3 is received...

CVE-2023-36921

SAP Solution Manager Diagnostics agent - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to serve poisoned content to the server. On successful exploitation, the attacker can cause a limited impact on confidentiality and availabilit...

Cross site request forgery (csrf)

SAP Solution Manager Diagnostics agent - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to serve poisoned content to the server. On successful exploitation, the attacker can cause a limited impact on confidentiality and availabilit...

IED RUGGEDCOM CROSSBOW Unauthorized Access

The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

IED Siemens RUGGEDCOM CROSSBOW Arbitrary Action

The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions remotely...