CVE-2023-28972 Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls. When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the...

CVE-2023-0035

creationtimestamp| type| source ---|---|--- 2023-01-09 07:27:19+00:00| seen| https://t.me/cibsecurity/56142...

CVE-2023-0035 softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

CVE-2023-0035 softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

CVE-2023-0035

OpenHarmony you’re looking at: affected product OpenHarmony v3.0.5 and earlier, with the issue in the softbus_client_stub of the communication subsystem. The root cause is an authentication bypass that enables an “SA relay attack,” allowing a local attacker to bypass authentication and target oth...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-1105)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0035)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0035)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.4 : curl (OVMSA-2020-0035)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix TFTP small blocksize heap buffer overflow 462 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers - CVE-2016-8616 case insensitive password comparison -...

kay (>=0.1.0 <=0.5.1) potentially affected by CVE-2020-36433 via chunky (>=0.1.4 <=0.3.7)

chunky CARGO version =0.1.4, =0.1.0, =0.5.1 Source cves: CVE-2020-36433 Source advisory: OSV:RUSTSEC-2020-0035...

Microsoft Internet Explorer Memory Corruption (MS11-003; CVE-2011-0035)

A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker may create a...

CVE-2020-0035

In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2020-0035

Technical details for CVE-2020-0035 are not provided in the connected documents; the available materials describe a local information disclosure in TelephonyProvider.java affecting Android 8.0–9. Monitor for updates.

CVE-2009-0035

creationtimestamp| type| source ---|---|--- 2019-11-09 07:38:15+00:00| seen| https://t.me/cibsecurity/8020 2024-02-05 17:52:15+00:00| seen| https://t.me/ctinow/179390...

CVE-2009-0035

CVE-2009-0035 affects alsa-utils 1.0.19 and later, enabling local users to overwrite arbitrary files through a symlink attack on /usr/bin/alsa-info and /usr/bin/alsa-info.sh. The vulnerability arises from improper handling of symlinks in these helper scripts, as documented across multiple sources...

Critical Photon OS Security Update - PHSA-2019-0035

Updates of 'unbound', 'python2', 'subversion', 'httpd', 'openjdk8', 'sudo' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0035

Updates of 'subversion', 'httpd', 'sudo', 'unbound', 'openjdk8', 'python2' packages of Photon OS have been released...

CVE-2019-0035

When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set system root-authentication plain-text-password" on systems booted from an OAM Operations, Administration, and Maintenance volume, leading to...

CVE-2019-0035

CVE-2019-0035 describes an administrative bypass on Juniper Networks Junos OS. When the insecure console port setting is enabled, an attacker with physical access can change the root password on systems booted from an OAM volume using the command set system root-authentication plain-text-password...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due a lack of validation for return objects without any properties in AsmJs.cpp, which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0015...