17116 matches found
Server side request forgery (ssrf)
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
CVE-2021-26715
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
CVE-2021-26715
The CVE-2021-26715 issue affects MITREid Connect OpenID Connect server (up to 1.3.3). The vulnerability is a Server-Side Request Forgery (SSRF) caused by unsafe handling of the logo_uri parameter in Dynamic Client Registration. An unauthenticated attacker can force the vulnerable server to make H...
CVE-2021-26715
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
KB5000862: Setup Dynamic Update for Windows 10, version 2004 and 20H2: March 25, 2021
None None...
CVE-2020-6787
Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including version 1.7.6.079 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same...
Mcafee McAfee Data Loss Prevention 后置链接漏洞
Mcafee McAfee Data Loss Prevention DLP is a data loss prevention suite from McAfee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and provides event management and reporting, synchronization of local and cloud DLP policies, and more. A security vulnerability exist...
PT-2021-2460 · Mcafee · Mcafee Data Loss Prevention
Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP for Windows versions prior to 11.6.100 Description: The issue is related to a privilege escalation vulnerability that allows a local, low-privileged attacker to load DLLs of their choice by using junctions and...
[SECURITY] Fedora 33 Update: glib2-2.66.8-1.fc33
GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...
[SECURITY] Fedora 34 Update: glib2-2.67.6-2.fc34
GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
Design/Logic Flaw
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
CVE-2021-3327
CVE-2021-3327 affects Ovation Dynamic Content 1.10.1 for Elementor, with a stored/ reflected cross-site scripting flaw exploitable via the post_title parameter. The connected materials confirm the product/version and the vulnerability class but do not provide exploit details, affected configurati...
How to Successfully Pursue a Career in Malware Analysis
Are you looking to becoming a malware analyst? Then continue reading to discover how to gain the training you need and start a career in malware analysis career. Did you know that new malware is released every seven seconds? As more and more systems become reliant on the internet, the proliferati...
Utimaco SecurityServer 安全漏洞
Utimaco SecurityServer is an application chip from Utimaco, Germany. It provides a general-purpose hardware security module that secures encryption key material for servers and applications. A security vulnerability exists in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0, which can be exploited by...
Elementor 跨站脚本漏洞
Elementor is a WordPress page builder from the Elementor team that offers a variety of design elements and supports custom templates and more. A cross-site scripting vulnerability exists in Elementor Ovation Dynamic Content version 1.10.1. The vulnerability is related to the posttitle parameter. ...
The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to cause a service failure.
The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...