8620 matches found
Online Trade - Online trading and cryptocurrency investment system security breach
Brynamics Online Trade is a system for trading cryptocurrencies online. A security vulnerability exists in Brynamics Online Trade. A remote attacker can exploit this vulnerability by making a direct request to /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or...
The vulnerability of Cisco Advanced Malware Protection for Endpoints’ threat detection system arises from an operation that goes beyond the buffer in memory, allowing attackers to trigger a service failure.
The vulnerability of the Cisco Advanced Malware Protection for Endpoints threat detection system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Cisco Advanced Malware Protection for Endpoints’ threat detection system lies in insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the Cisco Advanced Malware Protection for Endpoints system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure...
The vulnerability of Cisco Advanced Malware Protection for Endpoints’ threat detection system arises from an operation that goes beyond the buffer in memory, allowing attackers to trigger a service failure.
The vulnerability of the Cisco Advanced Malware Protection for Endpoints threat detection system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...
PT-2020-18975 · Silverstripe · Silverstripe
Name of the Vulnerable Software and Affected Versions: SilverStripe version 4.5.0 Description: The issue allows attackers to read certain records that should not have been placed into a result set. This is due to the automatic permission-checking mechanism in the silverstripe/graphql module not...
PT-2020-3298 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server versions prior to the fixed version Microsoft SharePoint Enterprise Server versions prior to the fixed version Description: The issue is related to insufficient sanitization of web requests, allowing an attacker to...
CVE-2020-8193
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints...
Improper access control
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints...
CVE-2020-8193
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints...
CVE-2020-8193
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints. Recent assessments: mekhalleh at July...
CVE-2020-5901
In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting XSS attack. If the victim user is logged in as admin this could result in a complete compromise of the system...
CVE-2020-5901
In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting XSS attack. If the victim user is logged in as admin this could result in a complete compromise of the system...
Cross site scripting
In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting XSS attack. If the victim user is logged in as admin this could result in a complete compromise of the system...
CVE-2020-5901
In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting XSS attack. If the victim user is logged in as admin this could result in a complete compromise of the system...
How to Configure Endpoints for Veeam Backup for AWS
You want to launch workers in the subnet with disabled auto-assignment of the Public IPv4 addresses...
Important: Red Hat Security Advisory: openstack-keystone security update
An update for openstack-keystone is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 7 : openstack-keystone (RHSA-2020:2732)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2732 advisory. The OpenStack Identity service keystone authenticates and authorizes OpenStack users by keeping track of users and their permitted activitie...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35439)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server that can be exploited by an attacker to modify the Update/Patch Channel endpoints of a private channel...