CVE-2020-6254

SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors, allowing XSS payload reflecting in the response, leading to reflected Cross Site Scripting...

2020-05 Security Only Update for .NET Framework 2.0 for Windows Server 2008 SP2 for Itanium-based Systems (KB4556406)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Fedora: Security Advisory for wordpress (FEDORA-2020-a0d6d5ccac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

Directory traversal

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

CVE-2020-12765

CVE-2020-12765 affects Solis Miolo 2.0, with a Directory Traversal vulnerability exposed via index.php?module=install&action=view&item=. The connected Red Hat entry corroborates the Solis Miolo 2.0 context and the path traversal behavior, but the available documents do not specify the exact affec...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

CVE-2020-4429

CVE-2020-4429 affects IBM Data Risk Manager (IDRM) versions 2.0.1–2.0.6. A default password for an IDRM administrative account enables a remote attacker to login and execute arbitrary code with root privileges. Public references confirm the default-password issue and associated high/severe impact...

webTareas 2.0.p8 - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: webTareas 2.0.p8 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://sourceforge.net/projects/webtareas/files/ Software Link: https://sourceforge.net/projects/webtareas/files/ Version: v2.0.p8 Tested on: Xam...

Photon OS 2.0: Systemd PHSA-2020-2.0-0236

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Ceph PHSA-2020-2.0-0237

An update of the ceph package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0237. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136326;...

Photon OS 2.0: Openjdk11 PHSA-2020-2.0-0235

An update of the openjdk11 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0235. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora: Security Advisory for libslirp (FEDORA-2020-30c45be10c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-4832f2bd62)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-abd0e92eaa)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

Photon OS 2.0: Sqlite PHSA-2020-2.0-0234

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0234. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13609...

Security Bulletin: A vulnerability in in IBM® Runtime Environment Java™ Version affects IBM WIoTP MessageGateway (CVE-2020-2654)

Summary There is a vulnerability in the IBM® Runtime Environment Java™ Version 8.0 used by IBM WIoTP MessageGateway. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker t...

Moderate: Red Hat Security Advisory: mod_auth_mellon security and bug fix update

An update for modauthmellon is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: mod_auth_mellon security and bug fix update

The modauthmellon module for the Apache HTTP Server is an authentication service that implements the SAML 2.0 federation protocol. The module grants access based on the attributes received in assertions generated by an IdP server. Security Fixes: modauthmellon: Open Redirect via the login?ReturnT...