CVE-2017-2626

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list...

Design/Logic Flaw

It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions...

CVE-2017-2625

It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions...

CVE-2017-2625

CVE-2017-2625 concerns libXdmcp prior to 1.1.2, which used weak entropy to generate session keys. On multi-user systems using xdmcp, a local attacker could examine process-list information to brute-force the key and hijack other users’ sessions. The issue is limited to the key-generation path; no...

CVE-2018-12804

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking...

CVE-2018-12804

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking...

CVE-2018-12804

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking...

Authentication flaw

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking...

CVE-2018-12804

CVE-2018-12804 affects Adobe Connect 9.7.5 and earlier, due to inadequate validation of meeting session tokens, leading to an Authentication Bypass and potential session hijacking. Nessus/ThreatPost corroborate the vulnerability as part of APSB18-22, which also addresses a corresponding session-m...

CVE-2018-12804

Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking...

HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability

Document Title: =============== HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID: ====================================...

GhostMail Status Message HTML Injection

Document Title: =============== GhostMail - Status Message Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1470 Release Date: ============= 2018-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 14...

HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability

Document Title: =============== HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID: ====================================...

Barracuda ADC 5.x Cross Site Scripting

Document Title: =============== Barracuda ADC v5.x - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1424 Release Date: ============= 2018-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

Adobe Connect Multiple Vulnerabilities (APSB18-22)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Barracuda ADC 5.x - Multiple Persistent Vulnerabilities

Document Title: =============== Barracuda ADC 5.x - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1424 Release Date: ============= 2018-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Jirafeau cross-site scripting vulnerability (CNVD-2018-13451)

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the search file by name form in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to inject JavaScript and manipulate the user session...

Cross site scripting

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

CVE-2018-13408

CVE-2018-13408 affects Jirafeau prior to 3.4.1. The vulnerability is a reflected XSS in the "search file by link" form that could allow an attacker to target an administrator, steal the admin session, and gain administrative privileges. Multiple connected sources corroborate the issue. Remediatio...

CVE-2018-12520

An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session IDs being allocated for active user sessions. An attacker with foreknowledge of the operating system and standard...