Important: Red Hat Security Advisory: docker security update

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2016-9962, which was previously fixed via RHSA-2017:0116. This issue could allow a malicious or compromised container to compromise the...

CVE-2020-14300

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2016-9962, which was previously fixed via RHSA-2017:0116. This issue could allow a malicious or compromised container to compromise the...

CVE-2020-14203

WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...

Cross site request forgery (csrf)

WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...

CVE-2020-14203

WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...

Cisco ASA Authentication Bypass (EXTRABACON)

This module patches the authentication functions of a Cisco ASA to allow uncredentialed logins. Uses improved shellcode for payload. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA...

CVE-2016-11062

creationtimestamp| type| source ---|---|--- 2020-06-20 01:55:15+00:00| seen| https://t.me/cibsecurity/12957...

CVE-2016-11066

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:42+00:00| seen| https://t.me/cibsecurity/12953...

CVE-2016-11069

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:39+00:00| seen| https://t.me/cibsecurity/12950...

CVE-2016-11071

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:37+00:00| seen| https://t.me/cibsecurity/12948...

CVE-2016-11076

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:31+00:00| seen| https://t.me/cibsecurity/12943...

CVE-2016-11079

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL...

CVE-2016-11080

An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details...

CVE-2016-11067

An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang...

CVE-2016-11064

An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection...

CVE-2016-11083

CVE-2016-11083 affects Mattermost Server prior to 2.2.0. The issue enables cross-site scripting (XSS) by configuring files to be opened in a browser window, allowing embedded scripts to run under certain conditions. The vulnerability originates from how files are rendered, not from external input...

CVE-2016-11081

CVE-2016-11081 affects Mattermost Server prior to 2.2.0. The issue allows unintended access to information stored by a web browser. The available documents do not provide the underlying root cause in detail, a concrete exploit scenario, affected components beyond the server version, or an officia...

CVE-2016-11080

Mattermost Server (Mattermost Server) before version 3.0.0 contains a vulnerability where a Team Administrator can access superfluous APIs to view account details. Affected component: server-side API exposing account data to higher-privilege users. Root cause: insufficient access control on accou...

CVE-2016-11079

Mattermost Server (github.com/mattermost/mattermost-server) contains an XSS flaw via the redirect URL in versions before 3.0.0. The root cause is improper handling/validation of the redirect URL parameter. Impact: attacker-supplied redirect can execute scripts in a user’s browser. Remediation: up...