stefan pietsch vulnerabilities and exploits

(subscribe to this query)

8.1

CVSSv3

An issue exists in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. Cleartext Transmission of Sensitive Information allows man-in-the-middle malicious users to eavesdrop authentication information between the application and the server.

Mensamax Mensamax 4.3

7.5

CVSSv3

An issue exists in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.

Mensamax Mensamax 4.3

6.5

CVSSv3

An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an malicious user to read data from all tables of the database via the parameter provider_id, as demonstrated by the /interface/main/calendar/index.php?module=PostCalendar&...

Open-emr Openemr 6.0.0

4.3

CVSSv3

A vulnerability has been identified in Micro Focus GroupWise Web in versions before 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

Microfocus Groupwise

9.8

CVSSv3

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.

Dolibarr Dolibarr Erp\\/crm 4.0.4

6.1

CVSSv3

Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.

Dolibarr Dolibarr Erp\\/crm 4.0.4

9.8

CVSSv3

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.

Dolibarr Dolibarr Erp\\/crm 4.0.4

5.3

CVSSv3

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat up to and including 3.9.1.

Rocket.chat Rocket.chat

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook