Ubuntu 16.04 ESM / 18.04 ESM : aria2 vulnerability (USN-4869-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4869-1 advisory. It was discovered that aria2 could accidentally leak authentication data. An attacker could possibly use this to gain access to sensitive information...

Baker Hughes Bently Nevada 3500 Security Breach

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring and protection system from Baker Hughes USA. A security vulnerability exists in the Bently Nevada 3500 Rack TDI Firmware version 5.05, which stems from an authentication key being used in conjunction with a connection...

Baker Hughes Bently Nevada 3500 Security Breach

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring, protection system from Baker Hughes USA. A security vulnerability exists in the Bently Nevada 3500 Rack TDI Firmware version 5.05, which stems from the system's ability to accept out-of-order messages from old...

Baker Hughes Bently Nevada 3500 Information Disclosure Vulnerability

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring, protection system from Baker Hughes USA. An information disclosure vulnerability exists in the Bently Nevada 3500 Rack TDI Firmware version 5.05, which stems from a security issue with the password retrieval feature, and...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2023-002)

The version of djvulibre installed on the remote host is prior to 3.5.27-28. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MATE-DESKTOP1.X-2023-002 advisory. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via...

Baker Hughes Bently Nevada 3500

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Baker Hughes - Bently Nevada Equipment : Bently Nevada 3500 System Vulnerabilities : Exposure of Sensitive Information to an Unauthorized Actor, Cleartext Transmission of Sensitive...

Citrix FAS: Your session 'AppName' did not launch successfully due to error code 3500

Session launch fails in the double hop scenario as explained below, First Hop: Successful desktop Launch Second Hop: Session fails to launch with the error code “Your session 'AppName' did not launch successfully due to error code 3500. Please contact your administrator for more information about...

CVE-2023-3500

creationtimestamp| type| source ---|---|--- 2023-08-02 07:38:56+00:00| seen| https://t.me/cibsecurity/67546...

CVE-2023-3500

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to...

CVE-2023-3500 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to...

CVE-2023-3500

GitLab CE/EE vulnerable to reflected XSS in PlantUML diagram creation, affecting versions 10.0–16.0.7, 16.1.0–16.1.2, and 16.2.0–16.2.1. Root cause is improper input handling in the diagram generation flow, enabling attackers to perform arbitrary actions on victims’ behalf. Remediations per sourc...

CVE-2023-3500 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to...

Cisco NX-OS Software Unauthorized Filesystem Access (CVE-2019-1601)

A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker coul...

Cisco NX-OS Software Privilege Escalation (CVE-2019-1604)

A vulnerability in the user account management interface of Cisco NX- OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID GID. An...

Cisco NX-OS Software Privilege Escalation (CVE-2019-1603)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the...

Cisco NX-OS Software Privilege Escalation (CVE-2019-1602)

A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker...

Cisco FXOS and NX-OS Software Unauthorized Directory Access (CVE-2019-1600)

A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to improper implementation of file system...

Cisco NX-OS Software Bash Shell Privilege Escalation (CVE-2019-1596)

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials. The vulnerability is due to incorrect permissions of a system executable. A...

Cisco NX-OS Software Cisco Fabric Services Denial of Service (CVE-2019-1616)

A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service DoS condition. The vulnerability is due to insufficient validation of Cisco Fabric Services packets. An...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...