1193 matches found
Image gallery suffers from denial of service vulnerability (CNVD-2019-30305)
Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...
Osmedeus v1.5 - Fully Automated Offensive Security Framework For Reconnaissance And Vulnerability Scanning
Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus ./install.sh This install only focus on Kali linux, check more install on Wiki page How to use I...
CloudBees Jenkins Skytap Cloud CI Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Skytap Cloud CI Plugin is used in one of the plug-in for...
macOS 10.14.x < 10.14.6 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6. It is, therefore, affected by multiple vulnerabilities : - An application may be able to read restricted memory CVE-2019-8691, CVE-2019-8692, CVE-2019-8693 - Extracting a zip file containing a symbolic link...
CVE-2019-13403
Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information...
PT-2019-13315
Name of the Vulnerable Software and Affected Versions Temenos CWX version 8.9 Description The issue is related to Broken Access Control in the /CWX/Employee/EmployeeEdit2.aspx module, allowing unauthorized viewing of user information. Recommendations For Temenos CWX version 8.9, consider...
CVE-2019-13403: Undefined Security Weakness
Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information...
Exploit for CVE-2019-13403
CVE-2019-13403 - Report: May 2019 - Fix: May 2019 - Credit: B3...
CVE-2019-11020
Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...
Authentication flaw
Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...
CVE-2019-11020
Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...
CVE-2019-11020
CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...
D-Link DCS-1130 and D-Link DCS-1100 Buffer Overflow Vulnerability
The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A buffer overflow vulnerability exists in Web Cgi in the D-Link DCS-1100 and DCS-1130. An attacker can exploit this vulnerability by attacking the orthrus daemon to take full control of the...
XnView Classic Buffer Overflow Vulnerability (CNVD-2019-22457)
XnView is a multi-platform software that supports image viewing, conversion and editing.XnView Standard is the standard version of XnView. A buffer overflow vulnerability exists in XnView Classic. An attacker can exploit this vulnerability to cause a denial of service...
WebP Express <= 0.14.10 - Multiple Issues
- Arbitrary File Viewing - CRSF - XSS including https://wpvulndb.com/vulnerabilities/9389 - Unauthorised Access...
CVE-2018-13375
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...
CVE-2018-13375
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in...
VK.com: Просмотр любых статей по их айди.
Просмотр статей...
Design/Logic Flaw
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges guest can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail¬ifyTo=SOLFORWARD&id= substring...
PT-2019-17884
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.1 Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view information without having the necessary view privileges. This is achievable through t...