comune.noale.ve.it Cross Site Scripting vulnerability OBB-1259920

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

servizionline.comune.mira.ve.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155853 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

CVE-2020-5888

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition VE may expose a mechanism for adjacent network layer 2 attackers to access local daemons and bypass port lockdown settings...

Code injection

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition VE may expose a mechanism for adjacent network layer 2 attackers to access local daemons and bypass port lockdown settings...

CVE-2020-5887

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition VE may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings...

CVE-2020-5881

The CVE-2020-5881 issue affects BIG-IP VE (not the hardware line) in versions 15.0.0–15.1.0.1, 14.1.0–14.1.2.3, and 13.1.0–13.1.3.3. When VLAN groups are configured and OSPF devices are present, NDAL Interfaces may lock up, disrupting communication between the mcpd and tmm processes and causing t...

CVE-2020-5881

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disrupting the communicatio...

CVE-2020-5878

CVE-2020-5878 affects BIG-IP VE with the Traffic Management Microkernel (TMM). Affected versions: 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3. The issue can cause TMM to restart while processing unusual IP traffic, potentially temporarily degrading traffic processing and causing HA fail...

F5 Networks BIG-IP : BIG-IP VE interface vulnerability (K03386032)

When the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disruptingthe communication between the mcpd and tmm processesCVE-2020-5881. Impact This issue...

stereo-ve-mono.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting stereo-ve-mono.com website and its users. Following...

Updated http-parser packages fix security vulnerability

http-parser has been updated to fix a security issue. HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed VE-2019-15605...

CVE-2019-19708

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

CVE-2014-4156

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability...

Design/Logic Flaw

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability...

CVE-2014-4156

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability...

CVE-2014-4156

Proxmox VE prior to 3.2 has a User Enumeration vulnerability in AccessControl.pm . The issue is described across sources (NVD, RH, CVE registries) as a vulnerability affecting Proxmox VE before version 3.2, named “AccessControl.pm User Enumeration Vulnerability.” Public references note a moderate...

F5 Networks BIG-IP : TMM vulnerability (K92002212)

Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger. CVE-2019-6676 Impact Some virtio backend implementations send large packets 2 KB or larger even when Large Offload Receive LRO is disabled. If the backend...

CVE-2019-6676

CVE-2019-6676 affects BIG-IP VE TMM: when using virtio direct descriptors with 2 KB or larger packets, TMM may restart and create a core file. Affected versions are BIG-IP VE: 15.0.0–15.0.1, 14.0.0–14.1.2, and 13.1.0–13.1.3.1. The advisory lists fixes in: 15.1.0, 14.1.2.3, and 13.1.3.2. Mitigatio...

Cross site scripting

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...