USN-4385-2: Intel Microcode regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Description USN-4385-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Skylake family 064EH from booting successfully...

CVE-2020-3362

A vulnerability in the CLI of Cisco Network Services Orchestrator NSO could allow an authenticated, local attacker to access confidential information on an affected device. The vulnerability is due to a timing issue in the processing of CLI commands. An attacker could exploit this vulnerability b...

Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (CNVD-2020-41804)

Cisco Enterprise NFV Infrastructure Software NFVIS is a suite of NVF infrastructure software platforms from Cisco. The platform can be achieved through the central coordinator and controller of the virtualization services of the full lifecycle management. A path traversal vulnerability exists in...

Cisco Network Services Orchestrator Information Disclosure Vulnerability

Cisco Network Services Orchestrator NSO is the United States Cisco Cisco company's set of network automation services solutions. An information disclosure vulnerability exists in the CLI in Cisco NSO Release prior to 4.7.7.3 and Release prior to 5.1.4.2. A local attacker could exploit this...

Hackers Target Military and Aerospace Staff by Posing as HRs Offering Jobs

Cybersecurity researchers today took the wraps off a new sophisticated cyber-espionage campaign directed against aerospace and military organizations in Europe and the Middle East with an aim to spy on key employees of the targeted firms and, in some case, even to siphon money. The campaign, dubb...

Cisco IOS XE Software Tcl DoS (cisco-sa-tcl-dos-MAZQUnMF)

According to its self-reported version, IOS is affected by a vulnerability in the Tool Command Line Tcl interpreter due to insufficient input validation of data passed to the Tcl interpreter. An authenticated, unprivileged, and local attacker can exploit this, by executing crafted Tcl arguments o...

CVE-2020-9289

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key...

MGASA-2020-0260 Updated networkmanager packages fix security vulnerability

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely...

The vulnerability of the CLI component of the Cisco IOS operating system, related to the lack of measures taken to clean data at the management level, allows a perpetrator to gain access to the system and execute arbitrary commands with root privileges.

The vulnerability of the Cisco IOS operating system’s CLI component is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to gain access to the system and execute arbitrary commands with root privileges...

Frigate 3.36.0.9 - (Command Line) Local Buffer Overflow (SEH) Exploit

Exploit Title: Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow SEH PoC Vendor Homepage: http://www.frigate3.com/ Software Link Download: http://www.frigate3.com/download/frigate3pro.exe Exploit Author: Paras Bhatia Vulnerable Software: Frigate Version: "Command Line" "Activate Command Lin...

PRET

The repository michaelxiaxc/PRET is a Printer Exploitation Toolkit that allows users to test the security of their printers. The tool connects to a device via network or USB and exploits the features of a given printer language, currently supporting PostScript, PJL, and PCL. The main idea of PRET...

Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco 1000 Series Connected Grid Routers IOS Software Command Injection Vulnerability

Cisco IOS is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in IOS Software in Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco 1000 Series Connected Grid Routers CGR1000, which stems from the...

NetworkManager Access Control Error Vulnerability

NetworkManager is a network management daemon. A security vulnerability exists in NetworkManager that stems from the fact that nmcli command line interface does not enforce the 802-1x.ca-path and 802-1x.phase2-ca-path settings. No details of the vulnerability are available at this time...

Lexiglot Information Disclosure Vulnerability (CNVD-2020-36284)

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. An information disclosure vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the presence of usernames and passwords on the command line and can be exploited by a local...

CVE-2014-8938

Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the username and password are on the command line...

Default credentials

Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the username and password are on the command line...

[SECURITY] Fedora 31 Update: marked-1.1.0-3.fc31

Install this for command line tool and man page. marked is a full-featured markdown compiler that can parse huge chunks of markdown without having to worry about caching the compiled output or blocking for an unnecessarily long time. marked is extremely fast and frequently outperforms similar...

[SECURITY] Fedora 32 Update: marked-1.1.0-3.fc32

Install this for command line tool and man page. marked is a full-featured markdown compiler that can parse huge chunks of markdown without having to worry about caching the compiled output or blocking for an unnecessarily long time. marked is extremely fast and frequently outperforms similar...

Fedora: Security Advisory for sleuthkit (FEDORA-2020-6e3e0c6386)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OAuth tokens and then use them to log into the cluster as any user who logged into the cluster via t...