5394 matches found
ProFTPD Code Issue Vulnerability
ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. A code issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD 1.3.6b and earlier versions, which can be exploited by an...
DEBIAN-CVE-2015-2793
Cross-site scripting XSS vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openididentifier parameter in a verify action to ikiwiki.cgi...
CVE-2015-2793
Cross-site scripting XSS vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openididentifier parameter in a verify action to ikiwiki.cgi...
PT-2019-7176
Name of the Vulnerable Software and Affected Versions ikiwiki versions prior to 3.20150329 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the openid identifier parameter in a verify action to "ikiwiki.cgi...
CVE-2015-2793: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openididentifier parameter in a verify action to ikiwiki.cgi...
Updated golang packages fix security vulnerability
Updated golang packages fix security vulnerability: Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify, resulting in denial of service CVE-2019-17596...
Malicious Package
Overview Version 0.8.0 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised. References GitHub Advisory...
nostromo nhttpd path traversal vulnerability
nostromo nhttpd is an open source web server . A path traversal vulnerability exists in the 'httpverify' function in nostromo nhttpd 1.9.6 and earlier. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An...
PT-2019-14609
Name of the Vulnerable Software and Affected Versions Nostromo nhttpd versions 1.9.6 and earlier Description The issue allows an attacker to achieve remote code execution via a crafted HTTP request due to a directory traversal vulnerability in the http verify function. This vulnerability is being...
CVE-2019-15533
XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...
GHSA-QWQC-28W3-FWW6 Message Signature Bypass in openpgp
Versions of openpgp prior to 4.2.0 are vulnerable to Message Signature Bypass. The package fails to verify that a message signature is of type text. This allows an attacker to to construct a message with a signature type that only verifies subpackets without additional input such as standalone or...
Message Signature Bypass in openpgp
Versions of openpgp prior to 4.2.0 are vulnerable to Message Signature Bypass. The package fails to verify that a message signature is of type text. This allows an attacker to to construct a message with a signature type that only verifies subpackets without additional input such as standalone or...
CVE-2019-7615
A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'servercacert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the...
Moderate: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update
An update for nss and nspr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
nss: PKCS#1 v1.5 signatures can be used for TLS 1.3
A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerabilit...
PT-2019-15799
Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.6 Description An issue was discovered in the tls verify crl function, where a wrong iteration variable is used when checking a client certificate against Certificate Revocation List CRL entries. This can cause som...
DEBIAN-CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerabilit...
UBUNTU-CVE-2019-11727
A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerabilit...
plumeliaedizioni.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-887135 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting plumeliaedizioni.it website a...
ssd.filemail.com Cross Site Scripting vulnerability
Security Researcher PyaePhyoThu Helped patch 313 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ssd.filemail.com website and its users. Following...