jba.123.is Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8601 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting jba.123.is website and its users. Following coordinated an...

CVE-2019-16027

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...

Design/Logic Flaw

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...

CVE-2019-16027

CVE-2019-16027 affects Cisco IOS XR Software IS-IS: an authenticated, remote attacker can cause a denial-of-service in the IS-IS process by sending a crafted SNMP request that abuses how the IS-IS code handles certain OIDs. The root cause is improper handling of SNMP requests for specific OIDs wi...

CVE-2019-16027 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...

Cisco IOS XR IS-IS Denial of Service Vulnerability

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial-of-service vulnerability exists in the Intermediate System-to-Intermediate System IS-IS routing protocol function in Cisco IOS XR versions prior to 6.6.3, 7.0.2, 7.1.1, and 7.2.1. The vulnerabili...

Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1280)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the IS-IS process. The vulnerability is due to improper...

DLL Hijacking Vulnerability in IS Voice pc Client Software

IS Voice for PC is a voice online group chat tool designed and developed for Chinese gamers. IS Voice for PC can provide stable and high-quality voice service, and it is a full-featured multiplayer voice software. IS Voice pc client software has a DLL hijacking vulnerability, which can be exploit...

Fedora Update for rsyslog FEDORA-2019-1fb95ae48d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

sigi.123.is Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1023220 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sigi.123.is website and it...

Description of the security update for Office 2016: November 12, 2019

None None...

CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18881

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile...

Design/Logic Flaw

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18881

WSO2 Identity Server as Key Manager 5.7.0 is affected by an unauthenticated reflected XSS in the dashboard user profile (CVE-2019-18881). Exploitation details are not provided in the given documents beyond this description, and no patch/version remediation is specified here. Multiple connected so...

CVE-2019-18881

WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile...

CVE-2019-18882

WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled...

CVE-2019-18882

WSO2 Identity Server (IS) acting as Key Manager 5.7.0 is vulnerable to a stored XSS in the download-userinfo.jag endpoint caused by mishandling of Content-Type. The vulnerability is described as a stored XSS in the referenced CVE-2019-18882 entry; no exploit details, specific impact scope, or rem...

Unsecured Adobe Server Exposes Data for 7.5 Million Creative Cloud Users

The U.S. multinational computer software company Adobe has suffered a serious security breach earlier this month that exposed user records' database belonging to the company's popular Creative Cloud service. With an estimated 15 million subscribers, Adobe Creative Cloud or Adobe CC is a...