2304 matches found
SUSE-SU-2021:0166-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - bsc1177077: Fixed DNSpooq vulnerabilities - CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. - CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows...
SQL injection vulnerability in SeaCMS backend (CNVD-2021-03454)
SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. Attackers can use the vulnerability to obtain sensitive information in the database...
Arteco Web Client DVR/NVR Session Hijacking Vulnerability
The session identifier used by Arteco Web Client DVR/NVR is of an insufficient length and can be brute forced, allowing a remote attacker to obtain a valid session, bypass authentication, and disclose the live camera stream. !/usr/bin/env python3 Arteco Web Client DVR/NVR 'SessionId' Cookie Brute...
CVE-2020-29552
creationtimestamp| type| source ---|---|--- 2020-12-23 19:25:33+00:00| seen| https://t.me/cibsecurity/21234 2024-11-14 06:07:40+00:00| seen| MISP/6a079369-d681-4501-8900-e3e90a37e1ae...
flowerorder.com Cross Site Scripting vulnerability OBB-1384582
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists the security wrapper does not deny access to some exposed properties using the deprecated exposedProps mechanism on proxy objects...
brasilsus.com.br Cross Site Scripting vulnerability OBB-1310292
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
almaktabaeltayeba.com Cross Site Scripting vulnerability OBB-1268577
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-1350
creationtimestamp| type| source ---|---|--- 2020-07-14 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/07/july-2020-security-update-cve-2020-1350-vulnerability-in-windows-domain-name-system-dns-server/ 2020-07-14 18:51:05+00:00| published-proof-of-concept|...
Unspecified Vulnerability in FreeRDP
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in updaterecvsecondaryorder in versions of FreeRDP prior to 2.1.2. No details of the vulnerability are provided at this time...
CVE-2020-4046
In affected versions of WordPress, users with low privileges like contributors and authors can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin...
jasig.275507.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1182252 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
oberemokii.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178711 Security Researcher geeknik Helped patch 8958 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting oberemokii.com website and...
taxisu.nl Open Redirect vulnerability
Open Bug Bounty ID: OBB-1175167 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
pikiwiki.org.il Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1145202 Security Researcher bevaralokesh Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting pikiwiki.org.il website and its users. Following coordinated and responsible vulnerability disclosure guidelines of t...
MS16-019: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: February 9, 2016
MS16-019: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: February 9, 2016 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework. The vulnerability could...
gmbuzz.com Cross Site Scripting vulnerability
Security Researcher error404 Helped patch 521 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting gmbuzz.com website and its users. Following coordinated an...
imglore.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1116479 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting imglore.com website a...
Vulnerability in core server (CVE-2020-1720)
ALTER ... DEPENDS ON EXTENSION is missing authorization checks. The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization checks, which can allow an unprivileged user to drop any function, procedure, materialized view, index, or trigger under certain conditions. This attack is...