Email Spamming

rdiffweb is vulnerable to Email Spamming. The vulnerability exists because there is no rate limit checks in the pageprefnotification.py, which allows an attacker to spam the victim's mailbox, causing additional expenses for the organization...

Incorrect Import Path Directories

Lines of code Vulnerability details Impact Wrong Import Path Directories of LiquidationPair.sol contract would affect the functionality of the contract as this contract relies of the implementation of this imports Proof of Concept 4. import ILiquidationSource from...

New SEC Cybersecurity Rules: What You Need to Know

The US Securities and Exchange Commission SEC recently adopted rules regarding mandatory cybersecurity disclosure. Explore what this announcement means for you and your organization...

GHSA-XPH3-VJCQ-G488 Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions

The organization selector before 4.0.14 from Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions

The organization selector before 4.0.14 from Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

CVE-2023-3426

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

CVE-2023-3426

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

Design/Logic Flaw

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

CVE-2023-3426

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations...

PT-2023-24782

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.3.81 through 7.4.3.85 Liferay DXP 7.4 update 81 through 85 Description The organization selector does not check user permission, allowing remote authenticated users to obtain a list of all organizations...

Liferay Portal and Liferay DXP Security Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2104-3465

The connected Mageia advisory MGASA-2014-0248 documents CVE-2104-3465 as a NULL pointer dereference in GnuTLS (gnutls_x509_dn_oid_name()) when parsing X.509 certificates with certain OIDs, potentially returning NULL and enabling a buffer overflow on the client during TLS/SSL handshakes, with a se...

CVE-2010-13616

CVE-2010-13616 is addressed in the Mageia/OpenVAS/OSV entries as part of SDL2-related fixes. The connected docs confirm a heap-based buffer over-read in BlitNtoN (video/SDL_blit_N.c) when called from SDL_SoftBlit (video/SDL_blit.c). The vulnerability is mitigated in the SDL 2.0.10 release, which ...

CVE-2016-1000273

Technical details for CVE-2016-1000273 are not publicly available in the provided documents; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2103-7470

Technical details for CVE-2103-7470 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-420004

CVE-2022-42004 is listed in IBM’s bulletin as part of the Jackson-Databind vulnerabilities affecting Eclipse Jetty/Jackson libraries; the entry describes a Denial of Service via Jackson Databind BeanDeserializer._deserializeFromArray, triggered by deeply nested arrays that exhaust resources. The ...

CVE-2023-358900

The connected IBM bulletin confirms CVE-2023-358900 affects IBM WebSphere Application Server traditional when shipped with IBM Intelligent Operations Center (IOC). Affected IOC versions: 1.5.0, 1.6.0, 1.6.0.1, 1.6.0.2, 1.6.0.3, and IOC for Emergency Management (Linux) 1.6.0. Remediation is to ins...

CVE-2022-237732

IBM Security Bulletin for CVE-2022-237732 (treated as CVE-2022-23773 in the IBM document) indicates an unspecified Golang Go vulnerability that may affect Watson CP4D Data Stores. Affected: all versions before IBM Cloud Pak for Data 4.7.0. Impact is not fully specified beyond the CVSS base score ...

cardozoec.org Cross Site Scripting vulnerability OBB-3552726

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

atixa.org Cross Site Scripting vulnerability OBB-3552645

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...