editions-circe.fr Cross Site Scripting vulnerability OBB-3936962

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2

Summary In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2 Vulnerability Details CVEID:CVE-2018-1000134 DESCRIPTION: Ping Identity UnboundID LDAP SDK could allow a remote attacker to...

Microsoft Windows Routing and Remote Access Service Security Vulnerability

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

Microsoft Message Queuing Resource Management Error Vulnerability

Microsoft Message Queuing is used to implement solutions for asynchronous and synchronous scenarios that require high performance. A resource management error vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following...

Microsoft Windows Storage Backlink Vulnerability

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Storage. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

Microsoft Winlogon Input Validation Error Vulnerability

Microsoft Winlogon is a Microsoft Corporation USA component built into the Windows NT family of operating systems developed by Microsoft. An input validation error vulnerability exists in Microsoft Winlogon. An attacker could exploit the vulnerability to elevate privileges. The following products...

Microsoft OLE DB Provider for SQL Server Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to information disclosure (CVE-2022-35718)

Summary IBM Sterling Partner Engagement Manager is vulnerable to information disclosure. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2022-35718 DESCRIPTION: IBM Sterling Partner Engagement Manager stores sensitive information in URL...

PT-2024-4185 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 16.10.6 GitLab CE/EE version 16.11 prior to 16.11.3 GitLab CE/EE version 17.0 prior to 17.0.1 Description: A Denial of Service DoS condition has been discovered in GitLab CE/EE. It is possible for an attacker to...

CVE-2024-32888 Amazon JDBC Driver for Redshift SQL Injection via line comment generation

The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is possible when using the non-default...

Microsoft Windows SCSI Class System File 缓冲区错误漏洞

The Microsoft Windows SCSI Class System File is one of Microsoft's system files used to manage SCSI devices. A buffer error vulnerability exists in the Microsoft Windows SCSI Class System File. The following products and versions are affected:Windows 10 Version 1809 for ARM64-based Systems,Window...

Microsoft Windows DWM Core Library 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in the Microsoft Windows DWM Core Library. The following products and editions are affected:Windows Server 2019 Server Core installation,Windo...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A buffer error...

Microsoft Windows Mobile Broadband 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and versions are affected:Windows Server 2022,Windows Server 2022 Server Core...

Microsoft Windows Remote Access Connection Manager 安全漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet.If this service is disabled, the VPN client application will If this service is disabled, VPN client applications will not...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

Microsoft Windows Cryptographic Services 缓冲区错误漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows...

Microsoft Windows Mobile Broadband 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

Microsoft Windows Kernel 后置链接漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Kernel. The following products and editions are affected:Windows 10 Version 22H2 for 32-bit Systems,Windows 11 Version 23H2 for ARM64-based...

Microsoft Windows Deployment Services 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Deployment Services. The following products and editions are affected: Windows Server 2008 for 32-bit Systems Service Pack 2,Windows...