157 matches found
openSUSE Security Update : otrs (openSUSE-2020-551)
Otrs was updated to 5.0.42, fixing lots of bugs and security issues : https://community.otrs.com/otrs-community-edition-5s-patch-level-42/ - CVE-2020-1773 boo1168029 OSA-2020-10 : - Session / Password / Password token leak An attacker with the ability to generate session IDs or password reset...
Recommended update for otrs (moderate)
openSUSE Security Update: Recommended update for otrs Announcement ID: openSUSE-SU-2020:0551-1 Rating: moderate References: 1122560 1137614 1137615 1139406 1141430 1141431 1141432 1156431 1157001 1160663 1168029 1168030 1168031 1168032 Cross-References: CVE-2019-10067 CVE-2019-12248 CVE-2019-1249...
OTRS 5.0.x < 5.0.42, 6.0.x < 6.0.27, 7.0.x < 7.0.16 Multiple Vulnerabilities
OTRS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...
CVE-2020-1771
Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...
CVE-2020-1771 Possible XSS in Customer user address book
Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...
CVE-2020-1771
CVE-2020-1771 affects OTRS Community Edition up to 6.0.26 and OTRS up to 7.0.15. An attacker can craft an article with a link to the customer address book containing malicious JavaScript; when opened, the missing parameter encoding allows JavaScript execution (XSS-like). Public disclosures and pa...
CVE-2013-1771
CVE-2013-1771 affects the Monkeyd web server, where the master.log (/var/log/monkeyd/master.log) is world-readable on Gentoo due to permissions. This could expose log contents (e.g., requests) as described in the provided sources. No concrete exploit details or patch/version remediation are prese...
Oracle Linux 8 : cyrus-imapd (ELSA-2019-1771)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1771 advisory. 3.0.7-15.1 - Resolves: 1718194 - don't overrun buffer when parsing strings with sscanf Tenable has extracted the preceding description block directly from the...
RHEL 8 : cyrus-imapd (RHSA-2019:1771)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1771 advisory. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fixes: cyrus-imapd: buffer overflo...
Rockwell Automation 1771-OAN General Purpose Discrete I/O
Binary data 753440.prm...
Rockwell Automation 1771-OBN General Purpose Discrete I/O
Binary data 753441.prm...
Rockwell Automation 1771-IQ16 General Purpose Discrete I/O
Binary data 753411.prm...
Rockwell Automation 1771-QH/A General Purpose Analog I/O
Binary data 753496.prm...
Rockwell Automation 1771-ACNR15 I/O Adapter Redundant 1771-ACNR15 A Communication Adapter
Binary data 752887.prm...
Rockwell Automation 1771-OZ or 1771-OZL General Purpose Discrete I/O
Binary data 753429.prm...
Rockwell Automation 1771-DB General Purpose Analog I/O
Binary data 753449.prm...
Rockwell Automation 1771-IBD General Purpose Discrete I/O
Binary data 753405.prm...
Rockwell Automation 1771-IJ Encoder
Binary data 753501.prm...