139 matches found
CVE-2020-1940
The CVE-2020-1940 vulnerability affects Apache Jackrabbit Oak, specifically version range 1.2.0 to 1.22.0. The issue arises from the optional initial password change and password expiration flow: the changed password is added to the credentials object but not removed during the first authenticati...
cdn.mossyoak.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1046597 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity
I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...
U.S. Builds World's Fastest Supercomputer – Summit
China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...
Timing Attack
Oak Core is vulnerable to timing attacks. Different responses are given for existing and non-existing user names from the server, allowing attackers to focus on guessing passwords for existing accounts...
airman (=0.0.1), bbc-a11y (=1.3.4) +8 more potentially affected by CVE-2018-1000006 via electron (>=1.6.0 <=1.6.15)
electron NPM version =1.6.0, =1.6.0, =0.0.15, =3.0.0, =0.1.10, =0.1.10, =0.1.11 Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...
lostoakwinery.com XSS vulnerability
Vulnerable URL: http://www.lostoakwinery.com/index.cfm?method=pages.showPage=B2C935CE-A4EE-C306-E0D1-3892A0CC5CF4=DisplayOrder%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...
stoneoakorthodontics.com XSS vulnerability
Vulnerable URL: https://stoneoakorthodontics.com/wp-content/plugins/widgetkit/widgets/mediaplayer/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...
Video Editor by Live Oak Video - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities
HackApp vulnerability scanner discovered that application Video Editor by Live Oak Video published at the 'play' market has multiple vulnerabilities...
Debian DSA-2796-1 : torque - arbitrary code execution
Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these comman...
Debian: Security Advisory (DSA-2796-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Lync 2012 Code Execution
Summary ======= Microsoft Lync 2010 fails to properly sanitize user-supplied input, which can lead to remote code execution. Microsoft was originally notified of this issue December 11, 2012. The details of this issue were made public January 11, 2013. CVE number: Not Assigned Impact: Low Vendor...
CVE-2012-4687
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value...
CVE-2012-4687
The CVE-2012-4687 issue affects the Post Oak AWAM Bluetooth Reader Traffic System, where the authentication/host key generation uses insufficient entropy. This weakness enables potential remote MitM attacks by predicting private keys, potentially compromising confidentiality and integrity. Affect...
PT-2012-5552 · Post Oak · Post Oak Awam Bluetooth Reader Traffic System
Name of the Vulnerable Software and Affected Versions: Post Oak AWAM Bluetooth Reader Traffic System affected versions not specified Description: The issue concerns the generation of private keys, which do not utilize a sufficient source of entropy. This makes it easier for man-in-the-middle...
Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability
Overview This advisory provides mitigation details for a vulnerability that impacts Post Oak Traffic AWAM Bluetooth Reader Systems. An independent research group composed of Nadia Heninger University of California at San Diego, J. Alex Halderman, Zakir Durumeric, and Eric Wustrow all from the...
U.S. federal lab linked to Stuxnet breached !
A federally funded U.S. lab that is suspected to have been involved in finding the vulnerabilities in Siemens SCADA systems used by the Stuxnet worm has shut down the Internet connection for its employees following the discovery of a breach into the facility's systems. The Oak Ridge National...
Oak Ridge National Laboratory Cuts Off Internet, E-mail After Attack
The Oak Ridge National Laboratory, a science and technology complex that houses one of the world’s fastest computers, was forced to suspend Internet access and e-mail capabilities for employees on Friday in response to what has been described as a targeted phishing attack, according to...
Thousands of Bank of America Accounts Hacked !
Thousands of Bank of America customers' account information could be in jeopardy after a major security breach. Christy Clark went to a Royal Oak drug store Friday, but when her debit card was declined, she knew something was wrong. "I was very embarrassed," Clark said. She went straight to the...