89 matches found
OESA-2021-1119 openldap security update
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
...
DEBIAN-CVE-2021-27212
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service daemon exit via a short timestamp. This is related to schemainit.c and checkTime...
Default configuration
The default configuration in the Dynamic Content Elements dce extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request...
CVE-2014-8328
The CVE-2014-8328 issue affects the TYPO3 Dynamic Content Elements (dce) extension prior to version 0.11.5. The vulnerability arises from the extension’s update check functionality, which could disclose sensitive installation environment information to remote attackers. The in-scope detail confir...
CVE-2014-8328: Exposure of Sensitive Information to an Unauthorized Actor
The default configuration in the Dynamic Content Elements dce extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request...
CVE-2019-17190
A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe which is running as NT AUTHORITY\SYSTEM when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, th...
Design/Logic Flaw
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
CVE-2019-19463
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
CVE-2019-19463
The CVE-2019-19463 entry concerns the Anhui Huami Mi Fit Android app prior to version 4.0.11, where the update check is performed without encryption. This unencrypted update check constitutes the root cause, potentially enabling tampering with update responses and affecting integrity of updates. ...
CVE-2019-19463: Cleartext Transmission of Sensitive Information
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...
PT-2019-15846
Name of the Vulnerable Software and Affected Versions Mi Fit application versions prior to 4.0.11 Description The issue concerns an unencrypted update check in the application. Recommendations For versions prior to 4.0.11, update to version 4.0.11 or later to resolve the issue...
Password Lense - Reveal Character Types In A Password
What is this? Certain characters in passwords 'O' and '0', 'I' and 'l', etc. can be hard to identify when you need to type them in and copy-paste is unavailable. Password Lense is a small web application that provides a quick and secure way to get a more informative view of your password. Feature...
UPDATE: Infection Monkey 1.6.3
PenTestIT RSS Feed Some days ago, Infection Monkey 1.6.3 was released. The first post about this tool can be found in a post titled the List of Adversary Emulation Tools. This is a small bugfix release, mostly around integration and packaging. It contains two user facing changes as well. What is...
Man-in-the-middle attack vulnerability in the latest version of Zhihu's Android client
Zhihu Android client is an online question and answer platform designed for Android users. The latest version of Zhihu's Android client has a security vulnerability in the "Check for Updates" function, which allows attackers to exploit the vulnerability to download malicious programs that cause...
Disable Quartz Phone Home
Quartz's phone home has not yet been disabled in Crowd. http://quartz-scheduler.org/documentation/best-practices suggests setting org.terracotta.quartz.skipUpdateCheck=true as a system property to disable this check...
Zenoss Core contains multiple vulnerabilities
Overview The Zenoss Core application, server, and network management platform software contains multiple vulnerabilities, the most severe of which could allow a remote attacker to execute arbitrary code. Description The Zenoss Core application, server, and network management platform software...
Lussumo Vanilla 1.1.5/1.1.7 'updatecheck.php' Cross Site Scripting Vulnerability
No description provided by source...
