access risk management suite vulnerabilities and exploits

The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a comman...

Courion Access Risk Management Suite 8.0

6.1

CVSSv3

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Jquery Jquery Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Drupal Drupal Backdropcms Backdrop Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Oncommand System Manager

489 Github repositories

6.1

CVSSv3

In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...

Jquery Jquery Drupal Drupal Debian Debian Linux 9.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Oracle Agile Product Lifecycle Management For Process 6.2.0.0 Oracle Application Testing Suite 13.3.0.1 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1

13 Github repositories

CVSSv2

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x prior to 5.2.4.1, 5.3.x prior to 5.3.2.1, and 5.4.x prior to 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 up to and including 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3R...

Juniper Session And Resource Control 1.0 Juniper Session And Resource Control 2.0 Juniper Src Pe 1.0 Juniper Src Pe 2.0

1 EDB exploit

CVSSv2

The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.

Openssl Openssl 1.0.2

3 Github repositories2 Articles

CVSSv3

Race condition in mm/gup.c in the Linux kernel 2.x up to and including 4.x prior to 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka ...

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 16.10 Linux Linux Kernel Redhat Enterprise Linux 5 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux Aus 6.2 Redhat Enterprise Linux Aus 6.4 Redhat Enterprise Linux Aus 6.5 Redhat Enterprise Linux Eus 6.6

5 EDB exploits128 Github repositories6 Articles

CVSSv3

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

Apache Software Foundation Apache Log4j2 Siemens 6bk1602-0aa12-0tp0 Firmware Siemens 6bk1602-0aa22-0tp0 Firmware Siemens 6bk1602-0aa32-0tp0 Firmware Siemens 6bk1602-0aa42-0tp0 Firmware Siemens 6bk1602-0aa52-0tp0 Firmware Apache Log4j Apache Log4j 2.0 Siemens Sppa-t3000 Ses3000 Firmware Siemens Capital Siemens Capital 2019.1 Siemens Comos

2 Metasploit modules883 Github repositories29 Articles

4.3

CVSSv2

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...

Openssl Openssl Openssl Openssl 1.0.0 Openssl Openssl 1.0.0a Openssl Openssl 1.0.0b Openssl Openssl 1.0.0c Openssl Openssl 1.0.0d Openssl Openssl 1.0.0e Openssl Openssl 1.0.0f Openssl Openssl 1.0.0g Openssl Openssl 1.0.0h Openssl Openssl 1.0.0i Openssl Openssl 1.0.0j

1 Article

6.1

CVSSv3

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inad...

Bootstrap Carousel Bootstrap Bootstrap Getbootstrap Bootstrap

2 Github repositories

7.8

CVSSv3

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle ...

196 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

access risk management suite vulnerabilities and exploits

CVE-2013-2747

CVE-2019-11358

CVE-2020-11022

CVE-2008-0960

CVE-2015-0291

CVE-2016-5195

CVE-2021-44228

CVE-2015-1788

CVE-2024-6484

CVE-2021-4034

Vulmon Search

About

Products

Connect