4320 matches found
Design/Logic Flaw
Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions gates are specific to source and destination IPs and ports of client and server. The design intent of the...
PT-2020-7862 · Juniper Networks · Srx +1
Name of the Vulnerable Software and Affected Versions: SRX affected versions not specified Description: The issue arises from the ftps-extensions option, which is disabled by default. This option is intended to provide functionality similar to regular, unencrypted FTP traffic when the SRX secures...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
Design/Logic Flaw
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8952: Improper Neutralization of Input During Web Page Generation
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
PT-2020-20390
Name of the Vulnerable Software and Affected Versions Fiserv Accurate Reconciliation versions prior to 3.0.0 Description The issue allows for cross-site scripting XSS attacks via the timeOut parameter in the logout.jsp endpoint. This could potentially lead to malicious script execution on the...
SmartCard device is disconnected from ICA after 60s .Users smart card connection is timed out while renewing the certificates on Smart card
When users are using SmartCard device to Launch Desktop or Application, the have noticed that after logging to ICA session Citrix Virtual Apps & desktops version 7.15 CU2 LTSR on Windows Server 2016 all user's certificates checked with special application. If a certificate is not valid/expired,...
UBUNTU-CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...
CVE-2011-4912
Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...
CVE-2011-4912
Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...
CVE-2011-4912
CVE-2011-4912 affects Joomla! com_mailto 1.5.x through 1.5.13 and is characterized by an automated mail timeout bypass. The connected records reiterate the same issue across multiple sources. The documents do not provide concrete exploit details, affected configuration specifics, or a remediation...
CVE-2011-4912: Incorrect Permission Assignment for Critical Resource
Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...
PT-2020-7145
Name of the Vulnerable Software and Affected Versions Joomla! com mailto versions 1.5.x through 1.5.13 Description The issue allows for an automated mail timeout bypass. Recommendations For versions 1.5.x through 1.5.13, update to a version that contains a fix for this issue...
CVE-2015-0244
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote attackers to conduct SQL injection attacks via crafted binary data in a parameter and causing an...
lemlist: SSRF in img.lemlist.com that leads to Localhost Port Scanning
Summary: A SSRF attack can be performed leading to localhost port scanning. Link : https://img.lemlist.com/api/image-templates/itpvBBNpQuMsy6FYLQAc/?preview=true&email=email@ Steps To Reproduce: To perform this port scan you'll need to setup a few files. First of all you need to change the url in...
How to change the default lifetime of Compositing Engine packaging machine in ELM
By default, if finalization has not begun in 3 days of time since the Packaging Machine was created, the task will be canceled with a timeout error. On the ELM logs, you may see something like the below: 2020-01-02 13:43:59,486 ERROR 61605 CompositingEngineP: Timeout occured after...
Linux: SSH ClientAliveInterval
The two options ClientAliveInterval and ClientAliveCountMax control the timeout of ssh sessions. When the ClientAliveIntervalvariable is set, ssh sessions that have no activity for the specified length of time are terminated. When the ClientAliveCountMax variable is set, sshdwill send client aliv...
Linux: SSH ClientAliveCountMax
The two options ClientAliveInterval and ClientAliveCountMax control the timeout of ssh sessions. When the ClientAliveIntervalvariable is set, ssh sessions that have no activity for the specified length of time are terminated. When the ClientAliveCountMax variable is set, sshdwill send client aliv...
Error: Lost connection to lmgrd, heartbeat timeout expired, exiting. EXITING DUE TO SIGNAL 28 Exit Reason 5 in License server
The following error appears in the log files on the License Server and the connection to the License Server is disconnected: Lost connection to lmgrd , heartbeat timeout expired, exiting. EXITING DUE TO SIGNAL 28 Exit Reason 5...