1506 matches found
CVE-2017-13988
An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function...
CVE-2017-13988
An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function...
Improper access control
An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function...
CVE-2017-13988
Affected product: ArcSight ESM and ArcSight ESM Express. Vulnerable versions: any 6.x prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. Root cause / impact: improper access control lets unauthorized users alter the maximum size of storage groups and enable/disable the follow schedule function. Exploitab...
CVE-2017-13988
An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function...
Announcing the BlueHat v17 Schedule
September is here! The dash from the close of the call for papers to now has been amazing. We had nearly two hundred submissions spanning the gamut of security topics and presenters. The result is a solid schedule that will challenge and educate all attendees. On behalf of the content advisory...
SUSE-SU-2017:2257-1 Security update for SUSE Manager Server 3.1
This update for the SUSE Manager Server 3.1 provides several fixes and improvements. The following security issues have been fixed: jabberd: - Fix offered SASL mechanism check. bsc1047282, CVE-2017-10807 spacewalk-java: - Do not allow XSS as Organization name. bsc1048968, CVE-2017-7538...
espndeportes.espn.com XSS vulnerability
Vulnerable URL: http://espndeportes.espn.com/sports/tvlistings/deportes/scheduleShow?showid=DC=EO%22%3E%3Cscript%3Ealert%27xssposed%27;%3C/script%3E=united%20states Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:|...
CVE-2015-0782
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management ZCM allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
hockeyfrance.com XSS vulnerability
Vulnerable URL: http://www.hockeyfrance.com/championnats/division-3/saison-reguliere/calendrier-resultats-division-3?linkpyxis=%2Fpage.php%3Fidrubrique%3D0%26file%3Doverview%26CompID%3D686%22-alertOPENBUGBOUNTY-%22=Play%20Offs%20D3== Details: Description| Value ---|--- Patched:| Verification in...
Introducing the Qualys New Look and Positioning
Dear Customer, Partner and Security Professional, I would like to thank all of you for your support during our ongoing journey to a world where we are making security invisible and an integrated component of the Digital Transformation of our enterprises. With your help and the dedication of our...
CVE-2017-11349
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data...
Free Personal Self Hosted Dynamic DNS
Free Personal Self Hosted Dynamic DNS with BIND and DNSSEC Environment: Server: static IP, running BIND Home: dynamic IP, running Debian/buntu Key Generation First step is to generate a key on the server. /etc/bind $ sudo dnssec-keygen -a HMAC-MD5 -b 512 -n HOST home.dynamic.n0where.net This...
lompocathletics.olinesports.com XSS vulnerability
Vulnerable URL: http://lompocathletics.olinesports.com/schedule.php?sport=1"...
lhscubs.olinesports.com XSS vulnerability
Vulnerable URL: http://lhscubs.olinesports.com/schedule.php?sport=1"...
m.dart.org XSS vulnerability
Open Bug Bounty ID: OBB-260039 Description| Value ---|--- Affected Website:| m.dart.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ourladyofthelakehalifax.org XSS vulnerability
Open Bug Bounty ID: OBB-258427 Description| Value ---|--- Affected Website:| ourladyofthelakehalifax.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
anguillaairservices.com XSS vulnerability
Vulnerable URL: http://www.anguillaairservices.com/schedule/index.php?airport1=1&airport2;=1"...