Russian Man Pleads Guilty in Thwarted Tesla Hack

March 19, 2021 TH Author 0 Comments

Enterprise Vulnerabilities
From DHS/US-CERT’s National Vulnerability Database CVE-2019-14830
PUBLISHED: 2021-03-19

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user’s mobile access token being exposed. (Note: This does not affect sites with a…

CVE-2019-14831
PUBLISHED: 2021-03-19

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum’s subscription mode was set to "forced subscription", the forum’s subscri…

CVE-2021-21267
PUBLISHED: 2021-03-19

Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input (for example `[email protected]0.0…

CVE-2019-10200
PUBLISHED: 2021-03-19

A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloads on master nodes. Pods with permission to access the host network, running on master nodes, can retrieve security credentials for the master AWS IAM …

CVE-2019-10225
PUBLISHED: 2021-03-19

A flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift Container Platform doesn’t sufficiently protect the GlusterFS StorageClass against leaking of the restuserkey. An attacker with basic-user permissions is able to obtain the value of restuserkey, and use…

Leave a Reply Cancel reply