New vulnerability on the NVD: CVE-2020-16259
Shubham Pandey
November 01, 2020
0
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced...
Read More
Post Top Ad
Showing posts with label security. Show all posts
Showing posts with label security. Show all posts
New vulnerability on the NVD: CVE-2020-16260
Shubham Pandey
November 01, 2020
0
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities fo...
Read More
New vulnerability on the NVD: CVE-2020-16261
Shubham Pandey
November 01, 2020
0
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. Published at: October 28, 2020 at 11:45PM View on website...
Read More
New vulnerability on the NVD: CVE-2020-16262
Shubham Pandey
November 01, 2020
0
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. Published at: Octobe...
Read More
New vulnerability on the NVD: CVE-2020-16263
Shubham Pandey
November 01, 2020
0
Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origi...
Read More
New vulnerability on the NVD: CVE-2020-21266
Shubham Pandey
November 01, 2020
0
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability. Published at: October 29, 20...
Read More
New vulnerability on the NVD: CVE-2020-22552
Shubham Pandey
November 01, 2020
0
The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No an...
Read More
New vulnerability on the NVD: CVE-2019-4547 (security_directory_server)
Shubham Pandey
October 31, 2020
0
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associat...
Read More
New vulnerability on the NVD: CVE-2019-4563 (security_directory_server)
Shubham Pandey
October 31, 2020
0
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g...
Read More
New vulnerability on the NVD: CVE-2019-4547 (security_directory_server)
Shubham Pandey
October 31, 2020
0
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associat...
Read More
New vulnerability on the NVD: CVE-2019-4563 (security_directory_server)
Shubham Pandey
October 31, 2020
0
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g...
Read More
New vulnerability on the NVD: CVE-2019-4547 (security_directory_server)
Shubham Pandey
October 30, 2020
0
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associat...
Read More
New vulnerability on the NVD: CVE-2019-4563 (security_directory_server)
Shubham Pandey
October 30, 2020
0
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g...
Read More
New vulnerability on the NVD: CVE-2019-4547 (security_directory_server)
Shubham Pandey
October 30, 2020
0
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associat...
Read More
New vulnerability on the NVD: CVE-2019-4563 (security_directory_server)
Shubham Pandey
October 30, 2020
0
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g...
Read More
New vulnerability on the NVD: CVE-2019-4547
Shubham Pandey
October 29, 2020
0
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associat...
Read More
New vulnerability on the NVD: CVE-2019-4563
Shubham Pandey
October 29, 2020
0
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g...
Read More
New vulnerability on the NVD: CVE-2020-15271
Shubham Pandey
October 26, 2020
0
In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file...
Read More
New vulnerability on the NVD: CVE-2020-15272
Shubham Pandey
October 26, 2020
0
In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if t...
Read More
New vulnerability on the NVD: CVE-2020-15274
Shubham Pandey
October 26, 2020
0
In Wiki.js before version 2.5.162, an XSS payload can be injected in a page title and executed via the search results. While the title is pr...
Read More
Search This Blog
Post Bottom Ad
Author Details
Much about Technology and a bit about Everything. We provide high quality of Information and tips tricks than bookmark us.updates daily.Have a Visit.
Much about Technology and a bit about Everything. We provide high quality of Information and tips tricks than bookmark us.updates daily.Have a Visit.
Our new website
Socialize