4324 matches found
CVE-2020-24227
Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...
openGauss: Limiting Connections to the Database
To control the number of sessions that access the database, the number of sessions connected to the database must be limited, preferably within 1024. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Playground Sessions Information Disclosure Vulnerability
GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A security vulnerability exists in Playground Sessions version v2.5.582 and prior versions, which stems from storing user credentials in plaintext...
GaussDB Kernel: Limiting Connections to the Database
To control the number of sessions that access the database, the number of sessions connected to the database must be limited, preferably within 1024. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
CVE-2020-12495
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...
Design/Logic Flaw
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...
CVE-2020-12495
The CVE-2020-12495 entry concerns Endress+Hauser Ecograph T (Neutral/Private Label) devices (RSG35, ORSG35) with firmware
Oracle WebLogic Server Administration Console Handle Remote Code Execution Exploit
This Metasploit module exploits a path traversal and a Java class instantiation in the handle implementation of WebLogic's Administration Console to execute code as the WebLogic user. Versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 are known to be affected. Tested against...
CVE-2020-23140
Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active...
wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. This flaw allows an attacker to cause an Out of memory OOM issue, leading to a denial of service. The highest threat from this vulnerability is to system availability...
OpenSSL < 0.9.2b Session Reuse / ACL Bypass Vulnerability
OpenSSL allow remote attackers to reuse SSL sessions and bypass access controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Audio Volume Persistence Tool
Description When a user reconnects to a XenApp session, all playback audio devices are reset to 100% volume level. Any playback volume settings previously made in the session are lost. This may also happen with a XenDesktop session. This tool restores the volume settings from values stored in the...
Session State Monitor Tool - XenApp/XenDesktop
Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description The Session State Monitor Utility actively monitors...
Design/Logic Flaw
Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout...
CVE-2020-15950
Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout...
CVE-2020-15950
CVE-2020-15950 affects Immuta v2.8.2. The vulnerability is described as improper session management, where user sessions are not revoked upon logout. This indicates a potential persistence of sessions after logout, as stated in the provided descriptions. No explicit exploitation details, affected...
CVE-2020-25688
A flaw was found in rhacm. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository which resulted in all installations using the same certificates. If an attacker could observe network traffic internal to a cluster, they could use the private key...
IBM Planning Analytics Local and IBM Planning Analytics Workspace Information Disclosure Vulnerability
IBM Planning Analytics is a suite of business planning analytics solutions from IBM USA. The solution supports automated execution of business planning, budgeting, and analysis processes.Planning Analytics Workspace is the Web management interface for IBM Planning Analytics. An information...