11783 matches found
up-front.com Improper Access Control vulnerability OBB-1494721
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security update for tomcat (moderate)
openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2020:1842-1 Rating: moderate References: 1177582 Cross-References: CVE-2020-13943 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tomcat...
openSUSE: Security Advisory for tomcat (openSUSE-SU-2020:1842-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-61031)
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. An unspecified vulnerability exists in Apple macOS Catalina. The vulnerability stems from the possibility that a Mac may not lock immediately upon wakeup. No details of the vulnerability are provided...
CVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
CVE-2020-25673
A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...
openSUSE Security Update : tomcat (openSUSE-2020-1799)
This update for tomcat fixes the following issues : - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...
OPENSUSE-SU-2020:1799-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582 This update was imported from the SUSE:SLE-15-SP2:Update update project...
just-make-up-shop.ru Cross Site Scripting vulnerability OBB-1467712
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Genexis Platinum-4410 Cross-Site Scripting Vulnerability
The Genexis Platinum-4410 is a wireless router from Genexis UK. The Genexis Platinum-4410 P4410-V2-1.28 device suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform malicious actions, where an XSS pop-up will affect all privileged users...
CVE-2020-27740
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread...
SUSE-SU-2020:3068-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up bsc1177582...
2020 DDoS Extortion Campaign -- A Sequel More Thrilling Than the Original
Costarring Susan McReynolds and Tom Emmons As you might imagine, as the go-to enterprise DDoS mitigation experts, our phones have been "ringing off the hook" as the global extortion DDoS campaign sequel rages on. It's bigger, badder, and features a broader cast of criminal characters than seen...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58749)
MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Optimizer component in Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this vulnerability to cause MySQL Server to hang ...
UBUNTU-CVE-2020-16120
Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a...
up-plastic.com Improper Access Control vulnerability OBB-1384915
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-5631
Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...
Acronis: Local Privilege Escalation using System Clean-up functionality
Vulnerability description not provided...
teams.speedupeurope.eu Cross Site Scripting vulnerability OBB-1339073
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...