873 matches found
Regional Virginia Bank Falls Victim to Coordinated $2.4M ATM Heist
A regional Virginia bank, the National Bank of Blacksburg, has lost $2.4 million in a cyber-heist that affected the STAR ATM and debit network, following a successful phishing attack that compromised the institution’s internal networks. The bank is now suing its insurance carrier for not covering...
CVE-2018-14328
CVE-2018-14328 affects Brynamics “Online Trade” (online trading/cryptocurrency investment system). Connected sources confirm information disclosure via direct requests to endpoints such as /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, and /privacy&terms, leaking sensit...
Ecuador to Withdraw Asylum for Wikileaks Founder Julian Assange
After protecting WikiLeaks founder Julian Assange for almost six years, Ecuador is now planning to withdraw its political asylum, probably next week, and eject him from its London embassy—eventually would turn him over to the British authorities. Lenín Moreno, the newly-elected President of...
Ecuador to Withdraw Asylum for Wikileaks Founder Julian Assange
After protecting WikiLeaks founder Julian Assange for almost six years, Ecuador is now planning to withdraw its political asylum, probably next week, and eject him from its London embassy—eventually would turn him over to the British authorities. Lenín Moreno, the newly-elected President of...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Security Bulletin: Multiple vulnerabilities in Samba affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance
Summary Samba vulnerabilities were disclosed on April 12, 2016. Samba is used by IBM SmartCloud Provisioning for IBM Software Virtual Appliance. IBM SmartCloud Provisioning for IBM Software Virtual Appliance has addressed the applicable CVEs including the vulnerability commonly referred to as...
Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect WebSphere Application Server shipped with SmartCloud Provisioning
Summary Multiple vulnerabilities in IBM SDK Java Technology Edition affect WebSphere Application Server shipped with SmartCloud Provisioning. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as “SLOTH”. Note that...
Security Bulletin: Fix available for Insecure Direct Object Reference in IBM Cúram Social Program Management (CVE-2018-1362)
Summary IBM Cúram Social Program Management Universal Access is vulnerable to Insecure Direct Object Reference. An authenticated user may have the ability to withdraw another user's submitted applications from the system and possibly obtain privileges. Vulnerability Details CVEID: CVE-2018-1362...
CVE-2018-10754
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2015-0262
CVE-2015-0262 is rejected and not a valid active vulnerability entry.
CVE-2018-6620
CVE-2018-6620 is linked to an authentication bypass in Odoo related to the Backup Database Action. OpenVAS and CNVD entries describe a vulnerability type where authentication could be bypassed to back up the database, affecting Odoo ERP deployments. The CVE entry itself has been withdrawn/rejecte...
Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange
Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...
SQL Injection Vulnerability in ThinkLC V3.5 Classified Information System withdrawal.php Page
ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC V3.5 Classified Information System withdrawal.php page due to the program failing to adequately filter user-supplied input. An attacke...
CVE-2017-17781
CVE-2017-17781 entry rejected; not an active security issue.
CVE-2017-17496
CVE-2017-17496 entry is rejected and does not represent an active vulnerability.
CVE-2017-15066
CVE-2017-15066 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-3168
This CVE entry is rejected/not used and does not represent an active vulnerability.