31238 matches found
Privilege escalation
The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...
CVE-2021-35495
CVE-2021-35495 — TIBCO JasperReports Server Scheduler Connection exposure : An authenticated user with network access can obtain FTP passwords of other users via the Scheduler Connection component. Affected products include TIBCO JasperReports Server and variants (Community, Developer, AWS Market...
Async-h1 request smuggling possible with long unread bodies
Impact This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applications. If the server does not read the body of a request which is longer than some buffer length, async-h1 will attempt to read a subsequent request from the body content...
GHSA-4VR9-8CJF-VF9C Async-h1 request smuggling possible with long unread bodies
Impact This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applications. If the server does not read the body of a request which is longer than some buffer length, async-h1 will attempt to read a subsequent request from the body content...
PT-2021-20935 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +5
Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server versions 7.2.1 and below TIBCO JasperReports Server versions 7.5.0 and 7.5.1 TIBCO JasperReports Server version 7.8.0 TIBCO JasperReports Server version 7.9.0 TIBCO JasperReports Server - Community Edition versions...
PT-2021-7948 · Microsoft +4 · System.Directoryservices.Protocols +4
Name of the Vulnerable Software and Affected Versions: System.DirectoryServices.Protocols version 5.0.0 Description: A information disclosure issue exists where System.DirectoryServices.Protocols.LdapConnection may send credentials in plain text on Linux. This could allow a remote attacker to...
Simple Online College Entrance Exam System 1.0 SQL Injection
Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass Date: 07.10.2021 Exploit Author: Mevlüt Yılmaz Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...
CVE-2021-25471
A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...
Design/Logic Flaw
A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection...
CVE-2021-25480
CVE-2021-25480 describes a vulnerability in the GUTI REALLOCATION COMMAND handling within Qualcomm modems, where a lack of replay attack protection before Samsung’s SMR Oct-2021 Release 1 could enable remote denial of service on the mobile network connection. The issue is tied to Qualcomm modem p...
CVE-2021-25471
A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...
CVE-2021-25471
The vulnerability CVE-2021-25471 affects Samsung devices in the Security Mode Command (SMC) processing path where replay protection is missing. This lack of replay attack protection can cause denial of service to mobile network connections and result in battery depletion. Documented impact is tie...
PT-2021-10271 · Gate One · Gateone
Name of the Vulnerable Software and Affected Versions: Gate One version 1.2.0 Description: The issue allows attackers to bypass the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list. Recommendations: For Gate One version 1.2.0,...
[SECURITY] [DLA 2773-1] curl security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2773-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 30, 2021 https://wiki.debian.org/LTS -...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to an incorrect connection-setup ordering in fs/nfs/nfs4client.c...
SUSE SLES15 Security Update : rabbitmq-server (SUSE-SU-2021:3254-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3254-1 advisory. - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. -...
connection-th.com Cross Site Scripting vulnerability OBB-2151938
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Failed to Verify the Connection to SQL Server
Challenge To back up a database, workers must be able to connect to the source SQL server. In case of consistent backup using a staging server, the workers must connect to the staging server. Connection to the source server is not required as Microsoft Azure performs the copy from the source to t...
The vulnerability of the MaxPatrol security control system, related to errors in processing connection requests, allows for disconnecting client connections from the management server.
The vulnerability of the MaxPatrol security control system is related to errors in processing connection requests. Exploiting this vulnerability can allow a malicious actor to interrupt the connection between clients and the management server, without compromising the functionality of the...
Unable to integrate Azure Active Directory as IDP directly on CEM
While performing AAD integration in CEM console, it shows error stating 'Your IDP settings could not be saved. The connection failed. Please review the information you entered.' We do not see any errors in the CEM logs for above issue...