CVE-2016-4996: Undefined Security Weakness

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...

CVE-2016-4996

CVE-2016-4996 affects Foreman/Discovery-Debug: when ssh is enabled on discovered nodes, the root password is logged in plaintext to the system journal, enabling local users with journal access to read it. Impact is local; confidentiality/integrity at risk. Remediation is to apply the Red Hat Sate...

CVE-2016-4996

discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...

PT-2017-8642 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 6.2 Description: The issue allows local users with access to the system journal to obtain the root password by reading the system journal or by clicking Logs on the console, when the ssh service has been enabled on...

Cajviewer suffers from a stack overflow vulnerability

cajviewer reader is a special full-text format reader for China Journal Network. Cajviewer has a stack overflow vulnerability when processing caj files, which can be exploited by an attacker to cause a denial of service or execute arbitrary script code...

Hardcoded credentials

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

CVE-2017-6022

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

CVE-2017-6022

CVE-2017-6022 affects BD PerformA (v2.0.14.0 and earlier) and KLA Journal Service (v1.0.51 and earlier); hard-coded credentials allow remote access to the BD Kiestra Database, risking confidentiality of PHI/PII. Exploitation is remote-feasible; no public exploits are cited. Remediation: apply upd...

CVE-2017-6022

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

CVE-2017-6022: Use of Hard-coded Password

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

PT-2017-16838

Name of the Vulnerable Software and Affected Versions Becton, Dickinson and Company BD PerformA versions 2.0.14.0 and prior Becton, Dickinson and Company BD KLA Journal Service versions 1.0.51 and prior Description A hard-coded password issue was discovered, which could be leveraged to compromise...

classifieds.courier-journal.com XSS vulnerability

Vulnerable URL: http://classifieds.courier-journal.com/category.php?place=Pets=1/-///'/"//--...

Arbitrary File Download Vulnerability in Research Journal General Cms

Research Journal General cms is a research journal content management system of Beijing Magtech Technology Development Co. The cms is vulnerable to an arbitrary file download vulnerability. An attacker can exploit this vulnerability to obtain system information...

sutlib2.sut.ac.th XSS vulnerability

Vulnerable URL: http://sutlib2.sut.ac.th/academicjournal/ListAll.cfm?rowstart=271=30==ID= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

reiserfstune 3.6.25 - Local Buffer Overflow

reiserfstune 3.6.25 - Local Buffer Overflow + Title: reiserfstune 3.6.25 – Local Buffer Overflow + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: N/A - Download -...

reiserfstune 3.6.25 - Local Buffer Overflow

Title: reiserfstune 3.6.25 – Local Buffer Overflow + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: N/A - Download -...

salisburyjournal.co.uk XSS vulnerability

Vulnerable URL: http://www.salisburyjournal.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 265793 VIP website status:| No Check salisburyjournal.co.uk SSL...

BD PerformA and KLA Journal Service Information Disclosure Vulnerability

BD PerformA and KLA Journal Service are both BD products for healthcare applications. The former is a set of applications for system monitoring; the latter is a set of applications for incremental backup. A security vulnerability exists in BD PerformA version 2.0.14.0 and earlier and KLA Journal...

Journal costs - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Journal costs published at the 'play' market has multiple vulnerabilities...

PT-2018-2585 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a flaw in the Linux kernel's ext4 filesystem, specifically with the jbd2 journal dirty metadata function, which can cause an out-of-bounds write. This can be...