343070 matches found
CVE-2024-23107
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, 6.3 all versions may allow an authenticated attacker to read password hashes of other administrators via CLI commands...
CVE-2024-23107
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, 6.3 all versions may allow an authenticated attacker to read password hashes of other administrators via CLI commands...
textstudio.com Cross Site Scripting vulnerability OBB-3932586
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
episcopalmaryland.org Cross Site Scripting vulnerability OBB-3932579
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
en.sergiobonelli.it Cross Site Scripting vulnerability OBB-3932543
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
emergingminds.com.au Cross Site Scripting vulnerability OBB-3932535
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
el-coronillo-lodge.entre-rios-hoteles.com Cross Site Scripting vulnerability OBB-3932533
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
chemicalparks.com Cross Site Scripting vulnerability OBB-3932531
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
RHEL 9 : perl-app-cpanminus (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16154 Note that Nessus has not...
CVE-2024-36390
MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service...
CVE-2024-36389
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...
CVE-2024-36388
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function...
CVE-2024-36392 MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-36392 MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-36391 MileSight DeviceHub - CWE-320: Key Management Errors
MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic...
CVE-2024-36390 MileSight DeviceHub - CWE-20 Improper Input Validation
MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service...
CVE-2024-36389 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...
CVE-2024-36389 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass...