Security Advisories
Veröffentlichte Schwachstellen
Schwachstellen, die wir bei Penetrationstests und Produktprüfungen gefunden und nach Abstimmung mit den Herstellern veröffentlicht haben. Jedes Advisory nennt die betroffenen Versionen, die Referenzen (u. a. CVE) und den Zeitplan der Veröffentlichung.
-
Privilege Escalation
-
Information Disclosure
-
Multiple Persistent Cross-Site Scritping (XSS) flaws in Drupal-Wiki
-
Cleartext Storage of Sensitive Information in Memory of mRemoteNG Processes
-
Windows Wire message reading after deletion
-
Privilege Escalation in NetSetMan Pro 4.7.2
-
Broken Object Level Authorization Vulnerability in OvulaRing-Webapplication
-
Command Injection, Broken Access Control and Evil-Twin-Attack in Microsoft Wireless Display Adapter V2 – CVE-2018-8306
-
SQL-Injection Vulnerability in OCS Inventory NG ocsreports Web application
-
Reflected Cross-Site-Scripting Vulnerabilities in OCS Inventory NG ocsreports Web application
-
Reflected XSS and Open Redirect in MailStore Server
-
Privilege escalation in an OPSI Managed Client environment
-
Multiple authentication weaknesses in Arvato Systems Streamworks Job Scheduler
-
Reflected XSS in W3 Total Cache
-
Reflected Cross-Site-Scripting (XSS) vulnerability
-
Several weaknesses in implementation of security features in AirDroid 1.0.4 beta
-
Multiple web-vulnerabilities in ownCloud 3.0.0
-
Multiple web-vulnerabilities in iTop version 1.1.181
-
Multiple vulnerabilities in OmniTouch Instant Communication Suite
-
Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones.
-
PHPAuction Administrative Interface Authentication Bypass Vulnerability