573 matches found
ESPEC MIC 多款产品访问控制错误漏洞
The ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in the Especmic RT-12N/RS-12N, RT-22BN, and TEU-12N, which stems from a lack of authentication for critical functions, and can be exploited by an attacker to tamper with the settings of the...
environmental-partnership.org Cross Site Scripting vulnerability OBB-3319575
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Schneider Electric NetBotz Cross-Site Scripting Vulnerability
Schneider Electric NetBotz is a proactive monitoring solution from Schneider Electric, France. It is designed to protect against physical, environmental or human threats that can cause disruption or downtime to IT infrastructure. Schneider Electric NetBotz suffers from a cross-site scripting...
summitenvironmentalsolutions.com Cross Site Scripting vulnerability OBB-3237014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Atlassian Jira 8.6.0 < 8.7.2 DLL Hijacking
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 8.0.x prior to 8.7.0. It is, therefore, affected by a vulnerability which permits when deployed onto the Windows operating system environment which allows local system attackers who ha...
Apache HTTP Server 环境问题漏洞
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable, and extensible via a simple API. An environmental issue vulnerability exists in Apache HTTP Server versions 2.4.30 through 2.4.55, which stems from the discovery of an HTT...
Use-After Free
python-django-horizon is vulnerable to Use-After Free. An Incorrect Permission Assignment for Critical Resource flaw allows Horizon session cookies to be created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files...
environmental-finance.com Cross Site Scripting vulnerability OBB-3121408
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Existential Risk and the Fermi Paradox
We know that complexity is the worst enemy of security, because it makes attack easier and defense harder. This becomes catastrophic as the effects of that attack become greater. In A Hackers Mind coming in February 2023, I write: Our societal systems, in general, may have grown fairer and more...
CVE-2022-38107
Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...
Information disclosure
Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...
CVE-2022-38107
CVE-2022-38107 affects SolarWinds SQL Sentry (v2021.10.18 and earlier per CNNVD). The issue arises from the ability to display sensitive information when a detailed technical error message is posted, potentially disclosing environmental details. Public documents do not confirm exploit code or act...
CVE-2022-38107 Sensitive Data Disclosure Vulnerability
Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...
CVE-2022-38107 Sensitive Data Disclosure Vulnerability
Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details...
PT-2022-24205 · Solarwinds · Sql Sentry
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Sensitive information could be displayed when a detailed technical error message is posted, potentially disclosing environmental details. Recommendations: At the moment, there is no...
CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
Pulse Secure Pulse Connect Secure 环境问题漏洞
Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. An environmental issue vulnerability exists in Pulse Secure Pulse Connect Secure version 9.115 and prior versions. An attacker could exploit this...
Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses
Okay, its an obscure threat. But people are researching it: Our models and experimental results in a controlled lab setting show it is possible to reconstruct and recognize with over 75 percent accuracy on-screen texts that have heights as small as 10 mm with a 720p webcam." That corresponds to 2...