3632 matches found
CVE-2019-10682
django-nopassword before 5.0.0 stores cleartext secrets in the database...
CVE-2020-6397
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...
Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)
Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Discovery Date: 2019-01-31 Exploit Author: Nolan B. Kennedy nxkennedy Vendor Homepage: https://www.verodin.com/...
CVE-2013-1867
Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...
MGASA-2020-0058 Updated samba packages fix security vulnerabilities
The implementation of ACL inheritance in the Samba AD DC was not complete, and so absent a 'full-sync' replication, ACLs could get out of sync between domain controllers CVE-2019-14902. When processing untrusted string input Samba can read past the end of the allocated buffer when printing a...
Exploit for CVE-2020-2551
Twitter: @Hktalent3135773...
CVE-2020-5853
In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict...
CVE-2019-19807
In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimeropen and sndtimercloselocked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a...
OPENSUSE-SU-2019:2591-1 Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...
CVE-2019-19242
CVE-2019-19242 affects SQLite 3.30.1, where mishandling of pExpr->y.pTab in sqlite3ExprCodeTarget (TK_COLUMN) causes a NULL pointer dereference in sqlite3ExprCodeTarget, potentially crashing the process. CVSSv3 base score 5.9 (MEDIUM). The Astra Linux bulletin confirms the SQLite 3.30.1 refere...
CVE-2019-13695
Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
whatson-kiev.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting whatson-kiev.com website and its users. Following...
SUSE-SU-2019:2983-1 Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275...
collection-pontdesarts.fr Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2350 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting collection-pontdesarts.fr website and its users. Following...
mmt-online.co.uk Open Redirect vulnerability
Open Bug Bounty ID: OBB-1008868 Security Researcher IfrahIman Helped patch 53 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting mmt-online.co.uk website an...
OPENSUSE-SU-2019:2441-1 Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999. This update was imported from the SUSE:SLE-15:Update update project...
SUSE-SU-2019:2809-1 Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999...
Kernel security update: Virtuozzo ReadyKernel patch 88.0 for Virtuozzo 7.0.7
The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernel 3.10.0-693.17.1.vz7.43.10 Virtuozzo 7.0.7. NOTE: No more patches are planned for this kernel, support for which ends with this update. Vulnerability id: CVE-2019-11810...
OPENSUSE-SU-2019:2052-1 Security update for slurm
This update for slurm to version 18.08.8 fixes the following issues: Security issue fixed: - CVE-2019-12838: Fixed a SQL injection in slurmdbd bsc1140709. This update was imported from the SUSE:SLE-15-SP1:Update update project...