342 matches found
CVE-2017-17674
BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery SSRF, or remote code execution RCE...
Cross site scripting
BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting XSS. A DOM-based cross-site scripting vulnerability was discovered in a legacy utility...
Server side request forgery (ssrf)
BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery SSRF, or remote code execution RCE...
CVE-2017-17675
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...
CVE-2017-17675
CVE-2017-17675 affects BMC Remedy Mid Tier 9.1SP3. The issue is log hijacking: remote logging can be accessed by unauthenticated users, enabling attackers to hijack system logs and potentially access usernames and HTTP data. The connected sources confirm affected product/version and the data expo...
CVE-2017-17678
Affected product: BMC Remedy Mid Tier 9.1SP3. Vulnerability: DOM-based cross-site scripting (XSS) in a legacy utility within the web interface. Root cause: likely improper handling of user-controllable input in the legacy utility, enabling script execution in the browser context. Impact: cross-si...
CVE-2017-17678
BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting XSS. A DOM-based cross-site scripting vulnerability was discovered in a legacy utility...
CVE-2017-17674
CVE-2017-17674 affects BMC Remedy Mid Tier 9.1SP3. The root cause is a lack of restrictions on what can be targeted in file inclusion, enabling attacks such as system fingerprinting, internal port scanning, SSRF, and potentially remote code execution (RCE). Impact is described across multiple sou...
PT-2021-8570
Name of the Vulnerable Software and Affected Versions BMC Remedy Mid Tier version 9.1SP3 Description A DOM-based cross-site scripting issue was found in a legacy utility of the software, which can be exploited for cross-site scripting XSS attacks. Recommendations For version 9.1SP3, consider...
PT-2021-8567
Name of the Vulnerable Software and Affected Versions BMC Remedy Mid Tier version 9.1SP3 Description The system is affected by remote and local file inclusion due to a lack of restrictions on targeted files. This can lead to attacks such as system fingerprinting, internal port scanning, Server Si...
BMC Software BMC Remedy 9.1SP3 日志信息泄露漏洞
BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy Mid Tier 9.1SP3 that originates from an unauthenticated user having access to remote logs,...
BMC Remedy Mid Tier 9.1SP3 跨站脚本漏洞
BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A cross-site scripting vulnerability exists in BMC Remedy Mid Tier 9.1SP3, which stems from a dom-based cross-site scripting vulnerability...
DEBIAN-CVE-2021-27918
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...
UBUNTU-CVE-2021-27918
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...
Command Injection Vulnerability in DrayTek Vigor 2960/3900/300B VPN Firewalls
The DrayTek Vigor Series routers are dual WAN port security firewall routers designed for mid-sized businesses. A command injection vulnerability exists in the DrayTek Vigor 2960/3900/300B VPN Firewall, which can be exploited by an attacker to execute arbitrary commands to gain privileges on the...
Kartpay: Disclosure of Merchant_id into the source code without entered OTP code leads to Victims MID takeover.
The System Encryption for the merchant registration was revealing the details which can be further exploitable for the Registration of the merchant. After sharing the details by the @bugera it was fixed by the team...
mid-city.com Cross Site Scripting vulnerability OBB-1493883
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Denial Of Service (DoS)
qt5 is vulnerable to denial of service. An incorrect call to SSLshutdown during mid-handshake causes a denial of service condition in TLS applications...
mid-city.com Cross Site Scripting vulnerability OBB-1438203
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Beers with Talos Ep. #84: Mid-career advancement in cyber security
Beers with Talos BWT Podcast episode No. 84 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. By Mitch Neff. Recorded May 26, 2020 Prod. Note: Things are a hot mess right now and the team thinks that there are voice...