PT-2020-20319

Name of the Vulnerable Software and Affected Versions Istio versions 1.3 through 1.3.6 Description An issue allows bypassing a specifically configured Mixer policy under certain circumstances. The Istio-proxy accepts the x-istio-attributes header at ingress, which can affect policy decisions when...

Servicing stack update for Windows 10, version 1903 and 1909: February 11, 2020

None None...

389-ds-base: Read permission check bypass via the deref plugin

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...

kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver

A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This...

CVE-2016-4676

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

CVE-2019-16020 Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16018: Uncontrolled Resource Consumption

A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that...

Cisco IOS XR BGP EVPN Denial of Service Vulnerability (CNVD-2020-07196)

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial of service vulnerability exists in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN feature in Cisco IOS XR 6.6.1 and later. The vulnerability stems from improper handling ...

PT-2020-1384

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

PT-2020-1385

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

PT-2020-1376

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality could allow an unauthenticated, remote attacker to cause a denial of service...

PT-2020-1382

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality. These vulnerabilities could allow an...

Servicing stack update for Windows Server 2008 SP2: November 12, 2019

Servicing stack update for Windows Server 2008 SP2: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befor...

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating...

Servicing stack update for Windows Server 2008 SP2: January 14, 2020

Servicing stack update for Windows Server 2008 SP2: January 14, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your...

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 10, 2019

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating...

OSIsoft PI Vision Access Control Error Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. The OSIsoft PI Vision Access Control Error vulnerability can be exploited by an attacker to return unauthorized tagged...

CVE-2019-18275: Improper Access Control

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes...

CVE-2020-6860

libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute...

WS-2020-0325

The commit Fix overflow of nested netlink attributes in the file lib/odp-util.c. Fix that by checking the length of nested netlink attributes before updating 'nlalen' inside the header The crash method are formatgenericodpkey checkattrlen formatodpkeyattr The fix version is v2.5.11...