UBUNTU-CVE-2020-22650

A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service DOS via a system crash triggered by the occurrence of a large number of alarm events...

SQL Injection Vulnerability in Hybrid Alarm Receiver at Honeywell (China) Co.

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company with a turnover of $38 billion. A SQL injection vulnerability exists in the Honeywell China Limited Hybrid Answering Machine, which can be exploited by an attacker to obtain sensitive information from...

SQL Injection Vulnerability in Hybrid Alarm Receiver (Professional Edition) at Honeywell (China) Limited (CNVD-2021-46687)

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Answering Machine Professional Edition, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Hybrid Alarm Receiver (Professional Edition) at Honeywell (China) Co.

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Answering Machine Professional Edition, which can be exploited by attackers to obtain sensitive information from the database...

Bug Exposes Eufy Camera Private Feeds to Random Users

Owners of Eufy home security cameras were warned this week of an internal server bug that allowed strangers to view, pan and zoom in on their home-video feeds for approximately one day. Inversely, customers were also suddenly given access to do the same to other users. The SNAFU, according to...

openSUSE Security Update : netdata (openSUSE-2021-647)

This update for netdata fixes the following issues : - Update to 1.29.3 Release v1.29.3 is a patch release to improve the stability of the Netdata Agent. We discovered a bug that when proc.plugin attempts to collect the operstate parameter for a virtual network interface. If the chart is obsolete...

OPENSUSE-SU-2021:0730-1 Security update for netdata

This update for netdata fixes the following issues: - Update to 1.29.3 Release v1.29.3 is a patch release to improve the stability of the Netdata Agent. We discovered a bug that when proc.plugin attempts to collect the operstate parameter for a virtual network interface. If the chart is obsoleted...

Soyal Technology 701Client 安全漏洞

SOYAL Soyal Technology 701Client is a hardware device from China's Moshu Information SOYAL. A toilet alarm. A security vulnerability exists in Soyal Technology 701Client 9.0.1 that stems from insecure privileges...

CVE-2020-28973

The ABUS Secvest wireless alarm system FUAA50000 v3.01.17 fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to...

CVE-2020-28973

The ABUS Secvest wireless alarm system FUAA50000 v3.01.17 fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to...

Design/Logic Flaw

The ABUS Secvest wireless alarm system FUAA50000 v3.01.17 fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to...

CVE-2020-28973

The ABUS Secvest FUAA50000 system (v3.01.17) contains an authentication flaw in its built‑in HTTPS interface that can disclose sensitive credentials (e.g., usernames and passwords). An attacker can use this to reconfigure or disable the alarm system. The root cause is described as improper authen...

Apache SkyWalking Storage SQL Injection (CVE-2020-13921)

An SQL injection vulnerability exists in Apache SkyWalking MySQL storage implementation. The vulnerability is due to insufficient validation of the user supplied input for wildcard alarm search query through GraphQL protocol...

CVE-2020-27030

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for...

Design/Logic Flaw

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allows an app to set or dismiss the alarm with no additional execution privileges needed. User interaction is not needed for...

Unspecified Vulnerability in Cisco Firepower Management Center and Cisco Firepower Threat Defense

Cisco Firepower Management Center and Cisco Firepower Threat Defense are both products of Cisco Corporation.Cisco Firepower Management Center is a next-generation firewall management center software.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall...

Vulnerabilities fixed in Check Point Zone Alarm Extreme Security

Check Point fixed vulnerabilities in Zone Alarm Extreme Security. The vulnerabilities allow a local malicious party to able to delete files restored from an archive and to obtain elevated privileges. Check Point has released a new version to address the vulnerabilities fixes. More information can...

CVE-2020-15533

In Zoho ManageEngine Application Manager 14.7 Build 14730 before 14684, and between 14689 and 14750, the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack...

Veeam Service Provider Console v4 Patch 2

Challenge Veeam Service Provider Console v4 Patch 2. Cause Please confirm you are running version 4.0.0.4877 or later before installing this Patch 2. You can check this by logging in to the backup portal and navigating to Configuration Support Information tab. After upgrading, your server build...

CVE-2020-14157

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...