The vulnerability of the IBM Robotic Process Automation software, related to security configuration errors, allows a perpetrator to alter the cluster configuration.

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability could allow an attacker to alter the cluster configuration...

The vulnerability of Microsoft Defender operating systems for Windows, related to security configuration errors, allows a hacker to bypass existing security restrictions.

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions using a specially created file...

The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

When Adding Store URL in Citrix WorkSpace App, It will Popup the Error "Cannot Configure the Store"

When adding the Store URL inside the Citrix WorkSpace App, it will popup the error "cannot configure the store"...

chelejones.com Cross Site Scripting vulnerability OBB-3597562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Radius server test connectivity fails : Error: '1812/udp' is not a valid Radius authentication port.

Radius server test connectivity failure. Error: "Either 'ServerIP' is not a valid Radius server, '1812/udp' is not a valid Radius authentication port or Radius client is not configured properly in the Radius server."...

The vulnerability of the Mozilla Firefox browser on Windows operating systems, related to security configuration errors, allows attackers to access confidential information.

The vulnerability of the Mozilla Firefox browser on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information using a created .scf script...

Ubiquiti UniFi 安全漏洞

Ubiquiti UniFi is a wireless networking system from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi OS version 3.1, which stems from a misconfiguration introduced in the console running the UniFi network that allows users on the local network to access MongoDB...

WEM Server Failed to Connect Database after SQL AlwaysOn Failover to Secondary

User has followed Citrix Doc below to setup AlwaysOn for WEM: https://docs.citrix.com/en-us/workspace-environment-management/current-release/system-requirements.htmlsql-server-always-on However, the WEM server won't be able to connect AlwaysOn database after a failover from primary SQL to...

Microsoft Edge browser’s vulnerability on Android, related to security configuration errors, allows attackers to bypass security restrictions.

The vulnerability of Microsoft Edge browser on Android is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions using a specially created file...

K13600: SSH vulnerability CVE-2012-1493

Security Advisory Description A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using secure shell SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH...

SUSE CVE-2012-6150

The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by...

CVE-2023-25561

DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service JAAS authentication and that system is given a configuration which contains an error, the authentication for the system will fail open and allow an attacker to login using any...

PT-2023-20159

Name of the Vulnerable Software and Affected Versions DataHub affected versions not specified Description The issue occurs when a system using Java Authentication and Authorization Service JAAS authentication encounters a configuration error, causing authentication to fail open. This allows an...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows a hacker to read arbitrary files.

The vulnerability of the Mozilla Firefox browser is related to security configuration errors. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

CVE-2022-45778

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 = 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a...

Design/Logic Flaw

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 = 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a...

CVE-2022-45778

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 = 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a...

NETGEAR 安全漏洞

NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in the NETGEAR RAX30 AX2400 prior to version 1.0.9.90, which stems from a network configuration error...

Airtable.js misconfiguration vulnerability

Airtable.js is Airtable open source an Airtable javascript client . Provides a simple way to access the data . A misconfiguration vulnerability exists in Airtable.js versions prior to 0.11.6 that stems from a misconfiguration in a script that binds environment variables to the build target of a...