|
Il servizio offre un sondaggio per la verifica della conformità di un’organizzazione al GDPR (General Data Protection... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
Il servizio offre una piattaforma che consente ai Registrar di verificare eventuali problemi di performance e sicurezza... |
| Published | Description | |
|---|---|---|
| CVE-2020-9417 |
20-10-2020 21:15:00 |
The Transaction Insight reporting component of TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System, TIBCO Foresight Archive and Retrieval System Healthcare Edition, TIBCO Foresight Operational Monitor, TIBCO Foresight Operational Monitor Healthcare Edition, TIBCO Foresight Transaction Insight, and TIBCO Foresight Transaction Insight Healthcare Edition contains a vulnerability that theoretically allows an authenticated attacker to perform SQL injection. Affected releases are TIBCO Software Inc.'s TIBCO Foresight Archive and Retrieval System: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Archive and Retrieval System Healthcare Edition: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Operational Monitor: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Operational Monitor Healthcare Edition: versions 5.1.0 and below, version 5.2.0, TIBCO Foresight Transaction Insight: versions 5.1.0 and below, version 5.2.0, and TIBCO Foresight Transaction Insight Healthcare Edition: versions 5.1.0 and below, version 5.2.0. |
| CVE-2020-15264 |
20-10-2020 21:15:00 |
The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this directory that a privileged service is looking for. For example, WptsExtensions.dll When Windows starts, it'll execute the code in DllMain() with SYSTEM privileges. Any unprivileged user can execute code with SYSTEM privileges. The issue is fixed in version 3.13.0 |
| CVE-2020-15269 |
20-10-2020 21:15:00 |
In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is described in the linked advisory. |
| CVE-2020-24765 |
20-10-2020 20:15:00 |
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request. |
| CVE-2019-9080 |
20-10-2020 20:15:00 |
DomainMOD before 4.14.0 uses MD5 without a salt for password storage. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
19-10-2020 |
Nagios XI 5.7.3 - 'Contact Templates' Persistent Cross-Site Scripting | php | Matthew Aberegg |
|
19-10-2020 |
Nagios XI 5.7.3 - 'SNMP Trap Interface' Authenticated SQL Injection | php | Matthew Aberegg |
|
19-10-2020 |
Online Job Portal 1.0 - Cross Site Scripting (Stored) | php | Akıner Kısa |
|
19-10-2020 |
Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields) | php | Kokn3t |
|
19-10-2020 |
Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in | java | Daniel Morris |
Italiano
English