CVE-2019-12549

CVE-2019-12549 affects WAGO Industrial Managed Switches 852-303 (pre FW06), 852-1305 (pre FW06), and 852-1505 (pre FW03). Root cause: hardcoded SSH private keys embedded in the SSH daemon; the host key fingerprint matches the embedded key. Impact: potential full device compromise with root access...

WAGO Industrial Managed Switches 852-303, 852-1305 and 852-1505 Trust Management Issue Vulnerability (CNVD-2020-36950)

WAGO Industrial Managed Switches 852-303 and so on are a kind of industrial managed switches from Germany WAGO company. A trust management issue vulnerability exists in the WAGO Industrial Managed Switches 852-303 prior to version 1.2.2.S0, 852-1305 prior to version 1.1.6.S0, and 852-1505 prior t...

Rockwell Automation Bul.1305 Drive 3.0A 230V 1305-AA03A Smart MCC

Binary data 754086.prm...

Rockwell Automation 1305 AC Drive Compact IO/SCANport

Binary data 754667.prm...

Rockwell Automation Bul.1305 Drive 12.0A 230V 1305-AA12A Smart MCC

Binary data 754125.prm...

Rockwell Automation Bul.1305 Drive 9.0A 460V 1305-BA09A Smart MCC

Binary data 754189.prm...

Rockwell Automation Bul.1305 Drive 4.0A 460V 1305-BA04A Smart MCC

Binary data 754175.prm...

Rockwell Automation Bul.1305 Drive 2.3A 460V 1305-BA03A Smart MCC

Binary data 754160.prm...

Rockwell Automation Bul.1305 Drive 4.5A 230V 1305-AA04A Smart MCC

Binary data 754096.prm...

Rockwell Automation Bul.1305 Drive 1.7A 460V 1305-BA02A Smart MCC

Binary data 754152.prm...

Rockwell Automation Bul.1305 Drive 2.3A 230V 1305-AA02A Smart MCC

Binary data 754075.prm...

Rockwell Automation Bul.1305 Drive 1.2A 460V 1305-BA01A Smart MCC

Binary data 754143.prm...

Rockwell Automation Bul.1305 Drive 6.0A 460V 1305-BA06A Smart MCC

Binary data 754182.prm...

Security Bulletin: Apache Tomcat as used in IBM QRadar SIEM is vulnerable to security constraint bypass. (CVE-2018-1304, CVE-2018-1305)

Summary Public disclosed vulnerability from Apache Tomcat Vulnerability Details CVEID: CVE-2018-1305 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the failure to properly enforce security constraints that are defined by annotations of Servlets...

Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2018-1304, CVE-2018-1305)

Summary Previous releases of IBM UrbanCode Deploy are affected by multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVE-ID: CVE-2018-1305 Description: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the failure to properly enforce security...

SUSE-SU-2018:3261-1 Security update for tomcat

This update for tomcat fixes the following issues: Version update to 7.0.90: - Another bugfix release, for full details see: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a director...

Critical: Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R8 security and bug fix update

An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

[SECURITY] [DSA 4281-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4281-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 29, 2018 https://www.debian.org/security/faq -...

Debian DLA-1450-1 : tomcat8 security update

Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2018-1304 The URL pattern of '' the empty string which exactly maps to the context root was not correctly handled in Apache Tomcat when used as part of a security constraint definition. This caused the...

Oracle Secure Global Desktop Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle Secure Global Desktop installed on the remote host is 5.3 / 5.4 and is missing a security patch from the July 2018 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - curl version curl 7.54.1 to and including curl 7.59.0 contains a Heap-based...