CVE-2020-12692

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

CVE-2020-12692

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

CVE-2020-12692

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

CVE-2020-12692

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

CVE-2020-12692: Authentication Bypass by Capture-replay

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

PT-2020-13209

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 15.0.1 OpenStack Keystone version 16.0.0 Description An issue was discovered in the EC2 API of OpenStack Keystone, where it lacks a signature TTL check for AWS Signature V4. This allows an attacker to sniff...

CVE-2017-18754

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58...

Server side request forgery (ssrf)

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

PT-2020-9845

Name of the Vulnerable Software and Affected Versions TP-Link TP-SG105E V4 version 1.0.0 Build 20181120 Description The issue allows an unauthenticated attacker to reboot the device. This can be achieved by sending a reboot.cgi request. Recommendations For TP-Link TP-SG105E V4 version 1.0.0 Build...

CVE-2019-16893: Missing Authentication for Critical Function

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request...

TP-Link Routers Give Cyberattackers an Open Door to Business Networks

A firmware vulnerability in TP-Link Archer C5 v4 routers used in enterprise and home environments could allow unauthorized, remote access to the device with administrative privileges. The bug CVE-2017-7405 affects models that run firmware version 3.16.0 0.9.1 v600c.0 Build 180124 Rel.28919n. Firs...

Input validation

Insufficient input validation in system firmware for IntelR XeonR Scalable Processors, IntelR XeonR Processors D Family, IntelR XeonR Processors E5 v4 Family, IntelR XeonR Processors E7 v4 Family and IntelR AtomR processor C Series may allow a privileged user to potentially enable escalation of...

CVE-2019-11137: Improper Input Validation

Insufficient input validation in system firmware for IntelR XeonR Scalable Processors, IntelR XeonR Processors D Family, IntelR XeonR Processors E5 v4 Family, IntelR XeonR Processors E7 v4 Family and IntelR AtomR processor C Series may allow a privileged user to potentially enable escalation of...

PT-2019-4280

Name of the Vulnerable Software and Affected Versions IntelR XeonR Scalable Processors affected versions not specified IntelR XeonR Processors D Family affected versions not specified IntelR XeonR Processors E5 v4 Family affected versions not specified IntelR XeonR Processors E7 v4 Family affecte...

SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2019:2364-1)

This update for ceph to version 12.2.12-594-g02236657ca fixes the following issues : Security issues fixed : CVE-2018-16889: Fixed missing sanitation of customer encryption keys from log output in v4 auth. bsc1121567 Note that Tenable Network Security has extracted the preceding description block...

WS-2019-0528

The commit has been fixed an access of reading data from v4 MAT file, according to the issue 16857 in oss-fuzz. The fix is in the crash method MatVarRead4 and the fix version is v1.5.18...

CVE-2019-15060

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field...

CVE-2019-15060: Improper Neutralization of Special Elements used in an OS Command

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field...

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

v4.marcdahmen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-948884 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting v4.marcdahmen.de website and...