The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software, related to authentication flaws, allows attackers to trigger a service failure.

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software, related to authentication flaws, allows attackers to trigger a service failure.

The vulnerability of NETGEAR Orbi Wi-Fi systems’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, stems from deficiencies in the authentication mechanism. This allows unauthorized users to gain access to protected information.

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vulnerabilities of operating systems such as iPadOS, iPhoneOS, tvOS, watchOS, and iCloud service, as well as the Safari browser and iTunes multimedia player, involve authentication errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities of operating systems such as iPadOS, iPhoneOS, tvOS, watchOS, the iCloud service, the Safari browser, and the multimedia player iTunes are related to authentication errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and...

The vulnerability of the Java framework’s LDAP module for securing Spring-based industrial applications allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the LDAP module of the Java framework for securing Spring-based industrial applications is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of Google Chrome’s web browser extensions, which allows a hacker to bypass existing security restrictions

The vulnerability of Google Chrome web browser extensions is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions through a specially created Chrome extension...

The vulnerability of the WAGO Ethernet controller, related to deficiencies in authentication procedures, allows a perpetrator to alter certain special parameters without being authenticated.

The vulnerability of the WAGO Ethernet controller is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to modify certain special parameters without being authenticated...

The vulnerability of Microsoft Word text editors, related to authentication deficiencies, allows attackers to disclose protected information.

The vulnerability of Microsoft Word relates to authentication deficiencies. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the web interface of Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) allows attackers to gain unauthorized access to protected information.

The vulnerability of the web-based interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected informatio...

The vulnerability of the TCP Intercept function in Cisco Firepower Threat Defense’s microprogramming-based network interface devices allows attackers to compromise the integrity of protected information.

The vulnerability of the TCP Intercept function in Cisco Firepower Threat Defense microprogramming systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of socket services in microprogramming software for server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of socket services in microprogramming software for server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of socket services in microprogramming software for server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Critical Flaws Discovered in Popular Industrial Remote Access Systems

Cybersecurity researchers have found critical security flaws in two popular industrial remote access systems that can be exploited to ban access to industrial production floors, hack into company networks, tamper with data, and even steal sensitive business secrets. The flaws, discovered by Tel...

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, related to authentication deficiencies, allows attackers to cause partial service interruptions.

The vulnerability of the virtual infrastructure management tools VMware vCenter Server and VMware ESXi hypervisor is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to cause partial service disruption from a remote location...

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

SUSE-SU-2020:2152-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication...

The vulnerability of the Eclipse Mosquitto messaging broker, related to authentication process flaws, allows attackers to gain unauthorized access to protected information.

The vulnerability of the access control list configuration of the Eclipse Mosquitto broker lies in insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...