Apache CXF 3.3.5 OpenId Connect JWK Keys Service Key information disclosure
January 20th, 2020 📆 | 2157 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.3 $0-$5k 1.26 A vulnerability was found in Apache
Browsing the "connect" Tag
Tagged with: apache • connect • disclosure • information • openid • service
Apache Kafka up to 2.3.0 Connect Cluster Plaintext information disclosure
January 15th, 2020 📆 | 3152 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.5 $5k-$25k 4.94 A vulnerability has been found in
Tagged with: apache • cluster • connect • disclosure • information • kafka • plaintext
MITREid Connect up to 1.3.3 OpenID Connect Reference Implementation cross site scripting
January 4th, 2020 📆 | 7368 Views ⚑
A vulnerability was found in MITREid Connect up to 1.3.3. It has been classified as problematic. This affects an unknown
Tagged with: connect • cross • implementation • mitreid • openid • reference
Sencha Connect connect.methodOverride() cross site scripting
December 28th, 2019 📆 | 4576 Views ⚑
A vulnerability was found in Sencha Connect (the affected version unknown). It has been classified as problematic. This affects the
Tagged with: connect • cross • methodoverride • scripting • sencha
UPC Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH Administration Page xml/setter.xml Password weak encryption
December 27th, 2019 📆 | 7925 Views ⚑
CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal
Tagged with: administration • ch7465lg • connect • eurodocsis • gateway • setter • voice
IBM API Connect up to 2018.4.1.7 Developer Portal Password information disclosure
December 17th, 2019 📆 | 1970 Views ⚑
A vulnerability classified as problematic was found in IBM API Connect up to 2018.4.1.7 (Automation Software). This vulnerability affects some
Tagged with: connect • developer • disclosure • information • password • portal
node-connect up to 2.8.0 Middleware cross site scripting
December 12th, 2019 📆 | 7526 Views ⚑
CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal
Tagged with: connect • cross • middleware • scripting
Vistaprint Leaves Customer Database Unprotected
November 25th, 2019 📆 | 2441 Views ⚑
Vistaprint, a global e-commerce seller of promotional products and printed marketing materials owned by Top 40 distributor Cimpress (asi/162149), has
Tagged with: advertising • Advertising Specialty Institute • ASI • ASI Show • Branded products • Chris Lovell • connect • Counselor • Credit Connect • customer • database • decorator • distributor • Email Express • Embroidery • ESP • ESP Online • ESP Web • ESP Websites • Homebased Business • importer • leaves • Logo Products • Logo sportswear • Market research • Norman Cohn • Pay For Placement • Product Research • Promo Products • Promotional Products • Rob Spike • Screen Printing • supplier • Supplier Global Resource • Tim Andrews • unprotected • vistaprint • Wearables • websites • wholesale • work from home
Cyber Security Connect UK welcomes UK’s cybersecurity elite
November 13th, 2019 📆 | 5648 Views ⚑
Cyber Security Connect UK (CSC UK), the leading exclusive conference and industry forum for chief information security officers (CISOs) kicks
Tagged with: connect • cyber • cybersecurity • elite • security • welcomes
OpenVPN Connect 3.0.0.272 – ‘agent_ovpnconnect’ Unquoted Service Path
November 8th, 2019 📆 | 1859 Views ⚑
# Exploit Title: OpenVPN Connect 3.0.0.272 - 'ovpnagent' Unquoted Service Path # Discovery by: Luis Martinez # Discovery Date: 2019-11-03
Tagged with: agent • connect • openvpn • ovpnconnect • service • unquoted
IBM API Connect up to 5.0.8.7 HTTP Request information disclosure
October 29th, 2019 📆 | 7114 Views ⚑
A vulnerability, which was classified as problematic, has been found in IBM API Connect up to 5.0.8.7 (Automation Software). Affected
Tagged with: connect • disclosure • information • request
Big wins at OneLogin Connect 19 London
October 16th, 2019 📆 | 1601 Views ⚑
OneLogin has announced the winners of several awards at its annual user conference, Connect19 London. Winners were selected from OneLogin’s
Tagged with: connect • london • onelogin
MiniShare 1.4.1 HTTP CONNECT Request Stack-based memory corruption
October 16th, 2019 📆 | 3564 Views ⚑
A vulnerability was found in MiniShare 1.4.1. It has been rated as critical. This issue affects some unknown functionality of
Tagged with: based • connect • corruption • memory • minishare • request • stack
Intel Smart Connect Technology for Intel NUC File Permission privilege escalation
October 13th, 2019 📆 | 4799 Views ⚑
A vulnerability was found in Intel Smart Connect Technology for Intel NUC (affected version not known). It has been rated
Tagged with: connect • intel • permission • privilege • smart • technology
LemonLDAP::NG up to 2.0.5 OpenID Connect Issuer Request privilege escalation
September 26th, 2019 📆 | 8553 Views ⚑
A vulnerability has been found in LemonLDAP::NG up to 2.0.5 (Directory Service Software) and classified as critical. Affected by this
Tagged with: connect • escalation • issuer • lemonldap • openid • privilege • request
Siemens SINEMA Remote Connect Server up to 2.0 Web Interface Bruteforce weak authentication
September 16th, 2019 📆 | 1741 Views ⚑
A vulnerability was found in Siemens SINEMA Remote Connect Server up to 2.0. It has been classified as problematic. Affected
Tagged with: bruteforce • connect • interface • remote • server • siemens • sinema
Siemens SINEMA Remote Connect Server up to 2.0 privilege escalation
September 16th, 2019 📆 | 6810 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) 5.3 $0-$5k A vulnerability was found in Siemens SINEMA Remote Connect Server
Tagged with: connect • escalation • privilege • remote • server • siemens • sinema
Siemens SINEMA Remote Connect Server up to 2.0 Web Application cross site request forgery
September 16th, 2019 📆 | 8519 Views ⚑
A vulnerability was found in Siemens SINEMA Remote Connect Server up to 2.0. It has been rated as problematic. Affected
Tagged with: application • connect • cross • remote • server • siemens • sinema
Siemens SINEMA Remote Connect Server up to 2.0 Password information disclosure
September 16th, 2019 📆 | 4630 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) 3.4 $0-$5k A vulnerability classified as problematic has been found in Siemens
Tagged with: connect • information • password • remote • server • siemens • sinema
patreon-connect Plugin up to 1.2.1 on WordPress privilege escalation
August 24th, 2019 📆 | 4279 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) 5.3 $0-$5k A vulnerability was found in patreon-connect Plugin up to 1.2.1
Tagged with: connect • escalation • patreon • plugin • privilege • wordpress
Wind River VxWorks 6.7/6.8/6.9/7 TCP connect() memory corruption
August 10th, 2019 📆 | 6876 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) 6.0 $0-$5k A vulnerability, which was classified as critical, was found in
Tagged with: connect • corruption • memory • river • vxworks
Org’s network connect to GitHub and Pastebin much? It’s a Rocke road to cryptojacking country • The Register
August 3rd, 2019 📆 | 3508 Views ⚑
Palo Alto Networks has spotted a new cryptomining malware technique that not only wipes out any other miners present on
Tagged with: connect • country • cryptojacking • github • network • pastebin • rocke
Org’s network connect to GitHub and Pastebin much? It’s a Rocke road to cryptojacking country • DigitalMunition
August 1st, 2019 📆 | 8365 Views ⚑
Palo Alto Networks has spotted a new cryptomining malware technique that not only wipes out any other miners present on
Tagged with: connect • country • cryptojacking • github • network • pastebin • rocke
IBM DB2/DB2 Connect Server 9.7/10.1/10.5/11.1 privilege escalation
July 2nd, 2019 📆 | 6267 Views ⚑
CVSS Meta Temp Score Current Exploit Price (≈) 8.0 $5k-$25k A vulnerability was found in IBM DB2 and DB2 Connect
Tagged with: connect • escalation • privilege • server
-
-
Popular
CIA hacking tools used to target 40 groups globally,… December 31, 2019 The CIA hacking tools exposed last month by WikiLeaks were…
N. Korean hackers mount phishing attack on NKHR groups December 30, 2019 On Dec. 18, a North Korean hacking group allegedly conducted…
Three States Launch New Data Breach Notification… January 1, 2020 Companies in Texas, Illinois, and Oregon will have new notification…
Don’t Ignore Chrome’s New Password… January 19, 2020 A strong password is one that's difficult for a human…
Emotet Unveils New Attacks, C&C URI Structure December 30, 2019 Last week in security news, researchers observed Emotet ringing out…
January 2020 Patch Tuesday forecast: Let’s… January 10, 2020 The holidays are over, and another Patch Tuesday is rapidly…
Macy’s data breach caused by a customized… January 2, 2020 Dive Brief: After Macy's disclosed a data breach last month,…
Comments