127 matches found
RangeeOS Credentials Plaintext Storage Vulnerability
RangeeOS is a Linux operating system designed and developed specifically for thin clients, including all necessary software modules. A credentials plaintext storage vulnerability exists in multiple modules in RangeeOS 8.0.4. A local attacker with access to the underlying operating system could...
CVE-2020-16281
The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and execute arbitrary code due to unrestricted context menus being accessible...
CVE-2020-16280
Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...
Default configuration
In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted environment or inject malicious code into the application and fully compromise the operating system...
CVE-2020-16282
RangeeOS 8.0.4 (Rangee GmbH) in its default configuration runs all components under the privileged root user, potentially allowing a local attacker to escape the restricted environment and fully compromise the operating system. The CVE entry notes this as a local action with root-level context, e...
CVE-2020-16279
CVE-2020-16279 : The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user input being passed to the command line without sanitization. Multiple connected sources (NVD, Red Hat, CNVD, CNVD, PRION, etc.) confirm this RCE on RangeeOS 8.0.4. The...
IBM MQ Denial of Service Vulnerability (CNVD-2020-44895)
IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A denial of service vulnerability exists in the queue processing feature in IBM MQ for HPE NonStop Server versio...
IBM MQ Denial of Service Vulnerability (CNVD-2020-36477)
IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A security vulnerability exists in the pubsub logic in IBM MQ for HPE NonStop versions 8.1.0 and 8.0.4. An...
Design/Logic Flaw
IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081...
CVE-2020-4376
CVE-2020-4376 affects IBM MQ family: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop (notably 8.0.4 and 8.1.0) due to a Denial of Service vulnerability caused by an error in the pubsub logic. Exploitation could crash the service, with impact classified as high for availability in some vector...
OTRS 7.0.x < 7.0.18, 8.0.x < 8.0.4 Information Disclosure Vulnerability
OTRS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if...
CVE-2020-4352
IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427...
Security Bulletin: IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1551
Summary IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1551 Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x6464 Montgomery squaring procedure used in...
CVE-2020-2688
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Object Migration. Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...
Oracle Financial Services Analytical Applications Infrastructure Remote Security Vulnerability
Description Oracle Financial Services Analytical Applications Infrastructure is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Object Migration' component is affected. This vulnerability affects the following supported versions: 8.0.4...
UBUNTU-CVE-2019-10079
Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't limit the number of setting frames sent from the client using the HTTP/2 protocol. Users should upgrade to Apache Traffic Server 7.1.7, 8.0.4, or later versions...
CVE-2019-17312
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user...
CVE-2019-17305
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user...