2114 matches found
CVE-2020-13998
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...
GitLab Input Validation Error Vulnerability (CNVD-2021-31224)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...
PT-2020-13827 · Citrix · Citrix Xenapp
Name of the Vulnerable Software and Affected Versions: Citrix XenApp version 6.5 Description: The issue allows a remote unauthenticated attacker to determine whether a user exists on the server when two-factor authentication 2FA is enabled. This is because the 2FA error page is only displayed aft...
CVE-2020-13268
A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and later through 13.0.1...
CVE-2020-13268
Removed by vendor...
PT-2020-13409 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.10 through 13.0.1 Description: A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. Recommendations: For GitLab CE/EE versio...
Security update for xawtv (moderate)
openSUSE Security Update: Security update for xawtv Announcement ID: openSUSE-SU-2020:0787-1 Rating: moderate References: 1171655 Cross-References: CVE-2020-13696 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...
cournon.com Cross Site Scripting vulnerability OBB-1182840
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sachet-1998.ocnk.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173516 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
denik.cz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1171762 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
ci.oakley.ca.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1167346 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
slovakia.navicosoft.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1166613 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
aljt.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164537 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
gubkin-euk.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1161621 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
voiceoverportuguese.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160395 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
comune.cheremule.ss.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159995 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
putlockers.tf Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159287 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
assopierrelay.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157417 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cartridgecollectors.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1155536 Security Researcher Tanzil Helped patch 187 vulnerabilities Received 2 Coordinated Disclosure badges Received 7 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting cartridgecollectors.org websi...
export-ugra.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-1152049 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting export-ugra.ru website a...