5240 matches found
PYSEC-2020-251
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verifyhostname option...
subscribe.ollysbox.com.au Cross Site Scripting vulnerability OBB-1276666
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to compromise data integrity.
The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...
The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to gain access to confidential data.
The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to access confidential data...
Arbitrary Code Execution
Bareos is vulnerable to arbitrary code execution. A heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job...
IBM Security Secret Server Code Issue Vulnerability
IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A security vulnerability exists in IBM Security Secret Server all editions...
CVE-2020-4459
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...
CVE-2020-4459
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...
Hardcoded credentials
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...
CVE-2020-4459
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...
CVE-2020-4459
CVE-2020-4459 concerns IBM Security Secret Server (all editions) with a root cause of hard-coded credentials used for authentication, external communication, or internal data encryption. The connected IBM advisory indicates the vulnerability is addressed by upgrading to version 10.8 (remediation)...
PT-2020-18076
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access version 10.7 Description The issue concerns hard-coded credentials, including passwords or cryptographic keys, used by IBM Security Verify Access for inbound authentication, communication with external components, or...
CVE-2020-4459: Use of Hard-coded Credentials
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...
Missing TLS certificate verification in faye-websocket
The Faye::WebSocket::Client class uses the EM::Connectionstarttls1 method in EventMachine2 to implement the TLS handshake whenever a wss: URL is used for the connection. This method does not implement certificate verification by default, meaning that it does not check that the server presents a...
CVE-2020-14337
A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data...
IBM Verify Gateway Information Disclosure Vulnerability
IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. An information disclosure vulnerability exists in IBM Verify Gateway 1.0.0, 1.0.1. The vulnerability originates from a globally readable log file. An attacker could exploit the vulnerability to obtain...
CVE-2020-4405
IBM Verify Gateway IVG 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484...
CVE-2020-4405
IBM Verify Gateway IVG 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484...