15053 matches found
CVE-2021-40350
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...
CVE-2021-40350
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...
Authentication flaw
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...
CVE-2021-40350
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...
CVE-2021-40350
CVE-2021-40350 affects Christie Digital DWU850-GS devices (firmware V06.46) via webctrl.cgi.elf. A crafted query with an unspecified Cookie header can bypass authentication, allowing an attacker to perform arbitrary actions. The root cause is an authentication bypass through cookie handling, with...
PT-2021-22870
Name of the Vulnerable Software and Affected Versions Christie Digital DWU850-GS version V06.46 Description The issue allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative...
CVE-2021-40350: Improper Authentication
webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...
The vulnerability of Adobe Digital Editions’ e-book reading software, which allows a hacker to disclose protected information
The vulnerability of the Adobe Digital Editions e-book reading program is related to deficiencies in its security mechanisms. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its ability to read data beyond the buffer boundaries, allowing an attacker to disclose protected information.
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially crafted file...
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its ability to read data beyond the buffer boundaries, allowing an attacker to disclose protected information.
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially crafted file...
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its ability to read data beyond the buffer boundaries, allowing an attacker to disclose protected information.
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read beyond the buffer boundaries, allowing attackers to exploit the protected information.
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
The vulnerability of the Adobe Digital Editions e-book reading program, related to reading beyond the buffer limit, allows a intruder to disclose protected information.
The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
purplecow.digital Improper Access Control vulnerability OBB-2129190
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
What is Eavesdropping Attack❓ Definition, Types and Prevention
Eavesdropping can be defined as the demonstration of quietly catching a discussion among arbitrary outsiders; albeit discourteous, what mischief might it actually do? All things considered, very little in case somebody is simply honestly paying attention to a discussion that intrigues them...
Common Vulnerabilities and Exposures Explained
What is a Vulnerability? A weakness can be characterized as a shortcoming that can be misused by a digital assailant to get through your security and gain unauthorized admittance to classified documents. Defects will ensure that aggressors run programs, acquire section admittance to your document...
Managing Privileged Access for a Post-COVID Perimeter
For many, 2021 signifies a year of recovery, reflection and reimagining. After the whirlwind year of 2020, we witnessed all aspects and facets of our lives and businesses turn upside down as our communities and economies adapted to the disruptions of the COVID-19 pandemic. As we all know, the...
Security Bulletin: CVE-2020-2773 (deferred from Oracle Apr 2020 CPU)
Summary Two XML Digital Signature APIs implemented in the XMLDSigRI provider throw unexpected Exception types. An attacker could exploit this to inflict a DoS. The fix ensures that all Exceptions thrown from these APIs are wrapped in instances of javax.xml.crypto.MarshalException. Vulnerability...
China Aims Its Propaganda Firehose at the BBC
The alleged digital operation has deployed hundreds of websites and social media accounts to attack the broadcaster's reporting...
Adobe Bridge Memory Out-of-Bounds Access Vulnerability (CNVD-2021-63267)
Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...