580 matches found
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
More info at https://symfony.com/cve-2021-21424...
CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms
More info at https://symfony.com/cve-2021-21424...
Design/Logic Flaw
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...
WordPress Content Copy Protection & Prevent Image Save plugin <= 1.3 - Authenticated Persistent XSS & XFS vulnerabilities
Authenticated Persistent XSS & XFS vulnerabilities discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save plugin versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...
WordPress Content Copy Protection & Prevent Image Save <= 1.3 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability
Authenticated Cross-Site Request Forgery CSRF vulnerability discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...
How to Prevent Users from Changing Client Device Access Settings for 12.x Plug-in and later versions of Receiver for Windows Using Client Selective Trust
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article provides information on how to prevent users from changing Client Device Access Setting...
Denial Of Service (DoS)
virtualbox is vulnerable to denial of service. A high privileged attacker is able to cause a denial of service condition and prevent users from using the service...
Denial Of Service (DoS)
virtualbox is vulnerable to denial of service. A high privileged attacker is able to cause a denial of service condition and prevent users from using the service...
Denial Of Service (DoS)
virtualbox is vulnerable to denial of service. A high privileged attacker is able to cause a denial of service condition and prevent users from using the service...
Code injection
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit...
SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3764-1)
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15436: Fixed a use after free vulnerability in fs/blockdev.c which could have allowed local users to gain privileges or cause a denial of service...
openSUSE Security Update : postgresql12 (openSUSE-2020-2029)
This update for postgresql12 fixes the following issues : - Upgrade to version 12.5 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...
CVE-2020-28991
Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines with URL encoding in ParseRemoteAddr in modules/auth/repoform.go...
tampabayboatco.com Cross Site Scripting vulnerability OBB-1483346
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Linux: noexec option on /dev/shm
The noexec mount option specifies that the filesystem cannot contain executable binaries. Setting this option on a file system prevents users from executing programs from shared memory. This deters users from introducing potentially malicious software on the system. SPDX-FileCopyrightText: 2020...
lscrealestate.com Cross Site Scripting vulnerability OBB-1432665
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kefengbearing.com Cross Site Scripting vulnerability OBB-1414143
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hljlywx.org.cn Cross Site Scripting vulnerability OBB-1397293
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kernel security and bug fix update
2.6.32-754.35.1.OL6 - Update genkey bug 25599697 2.6.32-754.35.1 - ata libata: fix NULL sdev dereference race in atapiqccomplete Kenneth Yin 1876296 2.6.32-754.34.1 - mm mm: prevent getuserpages from overflowing page refcount Aristeu Rozanski 1705003 - mm mm/hugetlb.c: getuserpages ignores certai...
dae-yang.kr Cross Site Scripting vulnerability OBB-1350273
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...