CVE-2020-15505

CVE-2020-15505 affects MobileIron Core & Connector (and related Sentry and RDB components). The vulnerability is a remote code execution via untrusted Java deserialization (Hessian-based) on vulnerable MobileIron versions 10.3.0.3 and earlier, 10.4.x, 10.5.x, and 10.6.0.0 and earlier; exploitable...

CVE-2020-15506

CVE-2020-15506 is an authentication bypass in MobileIron Core & Connector, affecting 10.3.0.3 and earlier, 10.4.x, 10.5.x, and 10.6.0.0. The public description states that remote attackers can bypass authentication via unspecified vectors. Connected sources confirm the issue is an auth bypass in ...

CVE-2020-15506: Undefined Security Weakness

An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors...

CVE-2020-15505: Use of Incorrectly-Resolved Name or Reference

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier that...

PT-2020-14466

Name of the Vulnerable Software and Affected Versions MobileIron Core & Connector versions 10.3.0.3 and earlier MobileIron Core & Connector versions 10.4.0.0 through 10.4.0.3 MobileIron Core & Connector versions 10.5.1.0 MobileIron Core & Connector versions 10.5.2.0 MobileIron Core & Connector...

GHSA-JCQ3-CPRP-M333 Privilege escalation in mysql-connector-jav

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

Privilege escalation in mysql-connector-jav

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

CVE-2020-2933

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection, causing a denial of service of the MySQL Connectors...

CVE-2020-2934

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands...

CVE-2020-2875

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands in MySQL Connectors and other products...

Fedora: Security Advisory for mariadb-connector-c (FEDORA-2020-35f52d9370)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the AJP Connector service of the Apache Tomcat application server allows a hacker to gain unauthorized access to read files within web applications.

The vulnerability of the AJP Connector service of the Apache Tomcat application server is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized read access to files within the web applications...

SUSE SLES12 Security Update : mariadb-connector-c (SUSE-SU-2020:1431-1)

This update for mariadb-connector-c fixes the following issues : Security issue fixed : CVE-2020-13249: Fixed an improper validation of OK packets received from clients bsc1171550. Non-security issues fixed : Update to release 3.1.8 bsc1171550 - CONC-304: Rename the static library to libmariadb.a...

Fedora 32 : 3:mariadb / galera / mariadb-connector-c (2020-35f52d9370)

MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8 Release notes : https://mariadb.com/kb/en/mariadb-10413-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-318-release-notes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

SUSE SLED15 / SLES15 Security Update : mariadb-connector-c (SUSE-SU-2020:1423-1)

This update for mariadb-connector-c fixes the following issues : Security issue fixed : CVE-2020-13249: Fixed an improper validation of OK packets received from clients bsc1171550. Non-security issues fixed : Update to release 3.1.8 bsc1171550 - CONC-304: Rename the static library to libmariadb.a...

Improper Privilege Management in Tomcat

When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...

Security Bulletin: Vulnerability in Apache Tomcat affects IBM Spectrum Protect Plus (CVE-2020-1938)

Summary An Apache Tomcat vulnerability which could allow a remote attacker to execute arbitrary code on the system affects IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-1938 DESCRIPTION: Apache Tomcat could allow a remote attacker to execute arbitrary code on the system, caused...

Debian: Security Advisory (DSA-4703-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2245-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4703-1 : mysql-connector-java - security update

Three vulnerabilities have been found in the MySQL Connector/J JDBC driver. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4703. The text itself is copyright C Software in the Public Interest, Inc...