Lucene search
K

37 matches found

Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.5 views

Update for RDP 8.1 is available for Windows 7 SP1

Update for RDP 8.1 is available for Windows 7 SP1 Summary This article describes an update for the Remote Desktop Protocol RDP 8.1 in Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update package provides the following improvements: Fixes connection reliability issues. Provides...

6.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/03/16 12:0 a.m.22 views

GLSA-202003-09 : OpenID library for Ruby: Server-Side Request Forgery

The remote host is affected by the vulnerability described in GLSA-202003-09 OpenID library for Ruby: Server-Side Request Forgery It was discovered that OpenID library for Ruby performed discovery first, and then verification. Impact : A remote attacker could possibly change the URL used for...

10CVSS8.2AI score0.01731EPSS
Exploits0References2
Gentoo Linux
Gentoo Linux
added 2020/03/14 12:0 a.m.112 views

OpenID library for Ruby: Server-Side Request Forgery

Background A Ruby library for verifying and serving OpenID identities. Description It was discovered that OpenID library for Ruby performed discovery first, and then verification. Impact A remote attacker could possibly change the URL used for discovery and trick the server into connecting to the...

10CVSS2.5AI score0.01731EPSS
Exploits0
Debian
Debian
added 2019/10/11 5:15 a.m.119 views

[SECURITY] [DLA 1956-1] ruby-openid security update

Package : ruby-openid Version : 2.5.0debian-1+deb8u1 CVE ID : CVE-2019-11027 ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connecting to the URL. This server in turn could be a private server n...

10CVSS9.3AI score0.01731EPSS
Exploits0
OSV
OSV
added 2019/09/09 7:15 p.m.18 views

CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

6.5CVSS6.2AI score
Exploits0References2
NVD
NVD
added 2019/09/09 7:15 p.m.17 views

CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

6.5CVSS6.1AI score0.00167EPSS
Exploits1References2
Prion
Prion
added 2019/09/09 7:15 p.m.17 views

Information disclosure

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

4CVSS6.1AI score0.00167EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2019/09/09 6:54 p.m.17 views

CVE-2019-11549

Removed by vendor...

6.5CVSS6.6AI score0.00167EPSS
Exploits1
Citrix
Citrix
added 2019/01/28 12:0 a.m.6 views

App Layering/Unidesk: vSphere ESX hosts in Maintenance Mode can unpredictably fail tasks

Tasks for operations on ESX hosts and VMFS datastores fail with errors about hosts losing connection or objects being in the wrong state...

7.2AI score
Exploits0
Veeam
Veeam
added 2017/07/26 12:0 a.m.23 views

Troubleshooting Certificate and Connection Errors in Cloud Connect

Challenge When adding a Service Provider on the tenant's Veeam Backup & Replication, either of the following errors occurs: Certificate validation failed. Unable to connect to the service provider. Certificate validation failed. Authentication failed because the remote party has closed the...

6.8AI score
Exploits0Affected Software1
Citrix
Citrix
added 2016/09/16 12:0 a.m.6 views

Receiver for Android Connects to Default StoreFront WebUI

When adding account using Receiver for Android 3.9.1 and accessing StoreFront using NetScaler Gateway, setting defaults to StoreFront Web UI instead of showing list of apps in the Receiver app. It opens a webpage to sign into Receiver for Web. When changing type to XenApp Services or NetScaler...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/06/15 12:0 a.m.19 views

Fedora 20 : armacycles-ad-0.2.8.3.3-1.fc20 (2015-9527)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

5.5AI score
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

Halo <= 1.05 Broadcast Client Crash Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2011/06/18 7:20 a.m.3 views

THC-HYDRA v6.4 - Fast network logon cracker

THC-HYDRA v6.4 - Fast network logon cracker THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote...

7.5AI score
Exploits0
Prion
Prion
added 2007/10/01 8:17 p.m.16 views

Default credentials

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

5CVSS6.9AI score0.00389EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2007/10/01 8:0 p.m.17 views

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

6.4AI score0.00389EPSS
Exploits0References4
FreeBSD
FreeBSD
added 2005/07/16 12:0 a.m.28 views

PowerDNS -- LDAP backend fails to escape all queries

The LDAP backend in PowerDNS has issues with escaping queries which could cause connection errors. This would make it possible for a malicious user to temporarily blank domains. This is known to affect all releases prior to 2.9.18...

2.1CVSS6.3AI score0.00007EPSS
Exploits0References2
Rows per page
Query Builder