1264 matches found
CVE-2019-19324: Always-Incorrect Control Flow Implementation
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
GHSA-PQ4W-QM9G-QX68 Insufficient Nonce Validation in Eclipse Milo Client
Impact Credential replay affecting those connected to a server when all 3 of the following conditions are met: - SecurityPolicy is None - using username/password or X509-based authentication - the server has a defect causing it to send null/empty or zeroed nonces Patches The problem has been...
PT-2020-10062
Name of the Vulnerable Software and Affected Versions OPC Foundation OPC UA .NET Standard codebase versions 1.4.357.28 through 1.4.359.30 Description The issue allows man-in-the-middle attackers to reuse encrypted user credentials sent over the network due to insufficiently random numbers created...
CVE-2009-5146
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2013-6499
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2016-1000103
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow Exploit
Exploit Title: EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow Exploit Author: Harrison Neal Vendor Homepage: https://www.ibm.com/us-en/ Version: 6100-09-04-1441, 7100-03-05-1524, 7100-04-00-0000, 7200-01-01-1642 Tested on: IBM AIX PPC CVE: CVE-2017-3623 EBBISLAND / EBBSHAVE RPC Buffe...
UBUNTU-CVE-2019-18678
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...
PYSEC-2019-146
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...
CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...
CVE-2019-14856: Improper Authentication
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None...
openSUSE Security Update : slurm (openSUSE-2019-2536)
This update for slurm fixes the following issues : Security issue fixed : - CVE-2019-12838: Fixed a SQL injection bsc1140709. Non-security issue fixed : - Added X11-forwarding bsc1153245. - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work...
CVE-2011-2186
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2019-15863
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
CVE-2019-15863
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
Cross site request forgery (csrf)
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
PT-2019-14442
Name of the Vulnerable Software and Affected Versions ConvertPlus plugin versions prior to 3.4.5 Description The issue allows for unintended account creation with the none role via a request for variants. Recommendations For versions prior to 3.4.5, update to version 3.4.5 or later to resolve the...
BELL-CVE-2007-6762 CVE-2007-6762 does not affect BellSoft software
Bulletin has no description...
