CVE-2019-12130

In ONAP CLI through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12124

An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected...

Design/Logic Flaw

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

CVE-2019-18917

CVE-2019-18917 affects certain HP Printers and All-in-One devices, where the underlying issue allows bypassing account lockout. The vulnerability is documented across multiple feeds, with HP’s own advisory (HP C06594863) confirming a potential account lockout bypass and noting that software updat...

PT-2020-10016

Name of the Vulnerable Software and Affected Versions HP Printers and All-in-Ones affected versions not specified Description A potential security issue has been identified that could allow bypassing account lockout on certain HP Printers and All-in-Ones. Recommendations At the moment, there is n...

CVE-2019-18917: Improper Restriction of Excessive Authentication Attempts

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

all-good-food.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116532 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-good-food.ru website a...

CVE-2020-6196

SAP BusinessObjects Mobile MobileBIService, version 4.2, allows an attacker to generate multiple requests, using which he can block all the threads resulting in a Denial of Service...

PT-2020-19237

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 74 Description A issue exists where a Web Extension with the all-urls permission can read local files when making a fetch request with a mode set to 'same-origin'. Recommendations For versions prior to 74, update to...

UBUNTU-CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

all-fonts.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112133 Security Researcher geeknik Helped patch 8781 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-fonts.ru website and i...

Fedora 31 : sudo (2020-8b563bc5f4)

update to latest development version 1.9.0b1 - added sudologsrvd and sudosendlog to files and their appropriate man pages Resolves: rhbz1787823 - Stack based buffer overflow in when pwfeedback is enabled Resolves: rhbz1796945 - fixes: CVE-2019-18634 - By using ! character in the shadow file...

Security Bulletin: IBM® Db2® is vulnerable to denial of service (CVE-2020-4161)

Summary Db2 is vulnerable to a denial of service. Authenticated users can use specific commands on a Db2 server to cause the server to terminate abnormally Vulnerability Details CVEID: CVE-2020-4161 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

The vulnerability of the sudoer account in the Runas ALL system administration software allows a hacker to impersonate an existing user.

The vulnerability of the sudoer account in the Runas ALL system administration program is related to improper access control. Exploiting this vulnerability allows a malicious actor to impersonate an existing user...

The vulnerability of the sudoer account in the Runas ALL system administration software allows a hacker to disable user authentication using a local password.

The vulnerability of the sudoer account in the Runas ALL system administration program is related to improper access control. Exploiting this vulnerability could allow a malicious actor to disable user authentication using the local password...

Cross site scripting

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...

CVE-2019-12513 Stored XSS via DHCP Discover Request Hostname

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...

Security Bulletin: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for Corporate Services (CVE-2019-4732)

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for Corporate Services. Financial Transaction Manager for Corporate Services FTM CPS has addressed the applicable CVE.brIf you run your own Java code using the IBM Java Runtime deliver...

Rabid - A CLI Tool And Library Allowing To Simply Decode All Kind Of BigIP Cookies

RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI @noraj...