CVE-2018-12523

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /etc/ provides a directory listing...

CVE-2018-12524

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /lib/ provides a directory listing...

CVE-2018-12525

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /images/ provides a directory listing...

CVE-2018-12523

PerfSONAR MaDDash 2.0.2 contains an information disclosure vulnerability: a direct request to /etc/ exposes a directory listing. Affected component is the MaDDash web UI (maddash-webui) handling /etc/. The issue allows enumeration of internal files and directories, which could reveal sensitive in...

PT-2018-11232

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to the "/images/" endpoint provides a directory listing, potentially exposing sensitive information. Recommendations...

PT-2018-11230

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to the "/etc/" directory provides a directory listing, potentially exposing sensitive information. Recommendations Fo...

CVE-2018-12525: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /images/ provides a directory listing...

CVE-2018-12522: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /style/ provides a directory listing...

CVE-2018-12524: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /lib/ provides a directory listing...

PT-2018-11229

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to "/style/" provides a directory listing, potentially exposing sensitive information. Recommendations For perfSONAR...

PT-2018-11231

Name of the Vulnerable Software and Affected Versions perfSONAR Monitoring and Debugging Dashboard MaDDash version 2.0.2 Description An issue was discovered where a direct request to the "/lib/" endpoint provides a directory listing, potentially exposing sensitive information. Recommendations For...

CVE-2018-12523: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard MaDDash 2.0.2. A direct request to /etc/ provides a directory listing...

MagniComp SysInfo Information Exposure

MagniComp SysInfo Information Exposure CVE-2018-7268 ====================================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/magnicomp-sysinfo-information-exposure.txt Overview -------- MagniComp SysInfo contains a information...

Security Bulletin: IBM Security Key Lifecycle Manager is affected by active debugging code (CVE-2016-6117)

Summary IBM Security Key Lifecycle Manager can be deployed with active debugging code that can create unintended entry points. Vulnerability Details CVEID: CVE-2016-6117 DESCRIPTION: IBM Tivoli Key Lifecycle Manager can be deployed with active debugging code that can disclose sensitive informatio...

Thousands of Android Devices Running Insecure Remote ADB Service

Despite warnings about the threat of leaving insecure remote services enabled on Android devices, manufacturers continue to ship devices with open ADB debug port setups that leave Android-based devices exposed to hackers. Android Debug Bridge ADB is a command-line feature that generally uses for...

CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

Design/Logic Flaw

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...