cxf: JMX integration is vulnerable to a MITM attack

Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle MITM style attack. An...

Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector DoS (cisco-sa-iosxe-umbrella-dos-t2QMUX37)

According to its self-reported version, IOS-XE is affected by a DoS vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches due to insufficient error handling when parsing DNS requests. An unauthenticated, remote attacker could exploit th...

The vulnerability of the Umbrella Connector component in Cisco IOS XE software for Cisco Catalyst 9200 Series network devices allows a hacker to induce a service failure.

The vulnerability of the Umbrella Connector component in the Cisco IOS XE software for Cisco Catalyst 9200 Series network devices is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2020-24246

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...

Improper Validation

mariadb-connector-c is using improper validation of content in a OK packet received from server...

mariadb-connector-c: Improper validation of content in a OK packet received from server

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2020-2008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2020-1999)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : mariadb-connector-c (EulerOS-SA-2020-1999)

According to the version of the mariadb-connector-c packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK...

EulerOS Virtualization for ARM 64 3.0.6.0 : mariadb (EulerOS-SA-2020-2008)

According to the version of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet...

Fedora: Security Advisory for mysql-connector-java (FEDORA-2020-35995bb2d3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: mysql-connector-java-8.0.21-1.fc33

MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43441)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the Umbrella Connector component of Cisco IOS XE used in Cisco Catalyst 9200 series switches, which can be exploited by an attacker by...

CVE-2020-3510

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient erro...

Design/Logic Flaw

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient erro...

CVE-2020-3510 Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient erro...

CVE-2020-3510

CVE-2020-3510 affects Cisco IOS XE Umbrella Connector on Catalyst 9200 Series switches. Root cause: insufficient error handling when parsing DNS requests. An unauthenticated remote attacker can send malicious DNS requests to the Umbrella Connector client interface, potentially crashing the iosd p...

Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient erro...

Fortinet FortiAnalyzer Cross-Site Scripting Vulnerability (CNVD-2020-53812)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

MGASA-2020-0369 Updated mysql-connector-java package fixes security vulnerability

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands CVE-2020-2934...