6424 matches found
CVE-2019-1353: Undefined Security Weakness
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...
CVE-2012-5626: Undefined Security Weakness
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation...
CVE-2011-3621: Undefined Security Weakness
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUMBEHINDREVERSEPROXY is enabled...
WordPress CTHthemes CityBook, TownHub and EasyBook Cross-Site Scripting Vulnerabilities (CNVD-2020-16668)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress CTHthemes CityBook versions prior to 2.3.4, TownHub...
CVE-2019-19411
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gai...
BitDam Study Exposes High Miss Rates of Leading Email Security Systems
Imagine receiving an email from US VP Mike Pence's official email account asking for help because he has been stranded in the Philippines. Actually, you don't have to. This actually happened. Pence's email was hacked when he was still the governor of Indiana, and his account was used to attempt t...
CVE-2011-2668: Undefined Security Weakness
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...
Bitwarden server encryption issue vulnerability
Bitwarden is an open source password manager.Bitwarden server is the core infrastructure of Bitwarden back-end server . A cryptographic vulnerability exists in Bitwarden server version 1.32.0 and earlier versions. The vulnerability stems from a network system or product that does not properly use...
MikroTik Winbox Man-in-the-Middle Attack Vulnerability
Winbox is a small utility program that allows you to manage MikroTik RouterOS using a quick and easy GUI. A man-in-the-middle attack vulnerability exists in MikroTik Winbox 3.20 and earlier versions. An attacker can exploit the vulnerability to degrade the client's authentication protocol and...
CVE-2020-2644: Undefined Security Weakness
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...
CVE-2019-19859: Undefined Security Weakness
An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...
CVE-2020-2611: Undefined Security Weakness
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...
CVE-2020-2585: Undefined Security Weakness
Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...
CVE-2020-2569: Undefined Security Weakness
Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...
CVE-2020-2692: Undefined Security Weakness
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...
CVE-2018-1108
A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated...
Apache Spark Authentication Bypass
The vulnerability of the Apache Spark framework is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Cisco Email Security Appliance Anti-spam Bypass
The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...
SharePort Web Access Privilege Escalation
The vulnerability of the SharePort Web Access function in D-Link router microprogramming products such as D-Link DIR-868L, D-Link DIR-885L, and D-Link DIR-895L is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...