17647 matches found
CVE-2020-11853
Micro Focus Operations Bridge Manager and related components (including UCMDB, Data Center Automation, Application Performance Management, Universal CMDB, Hybrid Cloud Management, Service Management Automation) are affected by CVE-2020-11853. The connected sources describe a remote code execution...
B. Braun OnlineSuite
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low and high skill level to exploit Vendor: B. Braun Melsungen AG Equipment: OnlineSuite Vulnerabilities: Relative Path Traversal, Uncontrolled Search Path Element, Improper Neutralization of Formula Elements in a CSV File 2. RISK...
CVE-2020-14767
The CVE-2020-14767 entry relates to Oracle Hyperion BI+ (IQR-Foundation service) with affected version 11.1.2.4. The vulnerability is described as exploitable by a high-privilege attacker with network access via multiple protocols, requiring user interaction, and capable of granting access to all...
ruhsam-architekten-ingenieure.de Cross Site Scripting vulnerability OBB-1433280
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
IBM Security Access Manager Security Bypass Vulnerability (CNVD-2020-59030)
IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. A security bypass vulnerability exists in IBM Security Access Manager version 9.0....
CVE-2020-7369
Summary of CVE-2020-7369 : A UI misrepresentation vulnerability in Yandex Browser’s address bar allows an attacker to obfuscate the true data source shown to the user. The issue affects Yandex Browser 20.8.3 and earlier and was fixed in 20.8.4 (Oct 1, 2020). The NVD lists a CVSS v3.1 base score o...
zonghuabxg.com Cross Site Scripting vulnerability OBB-1429657
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kempenskarakter.whirlihost.com Cross Site Scripting vulnerability OBB-1429651
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-5640
OneThird CMS Local File Inclusion (CVE-2020-5640) affects v1.96c and earlier. An unauthenticated remote attacker can cause arbitrary code execution or disclose sensitive data via unspecified vectors due to local file inclusion. Remediation: upgrade to v1.96d (as cited by multiple sources) or appl...
frontlink.jp Cross Site Scripting vulnerability OBB-1424344
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
re-newcopy.jp Cross Site Scripting vulnerability OBB-1424301
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
racerampskorea.com Cross Site Scripting vulnerability OBB-1420752
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Simple-Live-Data-Collection - Simple Live Data Collection Tool
How it works? 1- Build server 2- Connect with admin and client to server 3- To collect information, send the request to the server through the admin, and then to the client Installation git clone https://github.com/LetsDefend/Simple-Live-Data-Collection Server cd server python main.py Admin cd...
onoya.biz Cross Site Scripting vulnerability OBB-1417925
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-9934
CVE-2020-9934 describes a local macOS/TCC bypass via environment-variable poisoning. The root issue is how tccd expands HOME/USER home paths to locate the TCC.db, enabling an attacker with local access to plant a malicious TCC database and alter an app’s entitlements (e.g., microphone/camera) wit...
CVE-2020-15157
The CVE-2020-15157 issue affects containerd (pre-1.2.14) where the default resolver would leak credentials when a container image manifest points to a foreign layer. If a manifest directs a layer URL to a attacker‑controlled web server and the image is pulled, credentials used for the registry co...
detski-stai.mebelizaketaring.com Cross Site Scripting vulnerability OBB-1412857
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-1777
CVE-2020-1777 affects OTRS: agent names reveal in chat interfaces and ticket transcripts when masking real agent names is configured. Affected versions: OTRS 7.0.21 and earlier, 8.0.6 and earlier. CVSS metrics indicate a MEDIUM severity: CVSS v3.1 base score 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A...