Design/Logic Flaw

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

Design/Logic Flaw

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

CVE-2019-13264

CVE-2019-13264 affects D-Link DIR-825AC G1 devices, exposing cross-network data flow between host and guest networks within the same device. The root cause is insufficient isolation, enabling data transfer via the IGMP Group IP field when a sender joins and leaves an IGMP group; the router then b...

CVE-2019-13264

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

CVE-2019-13267

The CVE-2019-13267 entry concerns TP-Link Archer C3200 V1 and Archer C2 V1 routers with insufficient isolation between host and guest networks on the same device. The root cause is a mechanism where, during IGMP group joins/leaves, the router creates an IGMP Membership Query using the Group IP, s...

CVE-2019-13267

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

Adobe Creative Cloud Desktop Application Insecure Transfer of Sensitive Data Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An insecure transmission of sensitive data vulnerability exists in Adobe Creative Cloud Desktop Application 4.6.1 and earlier versions. An attacker could exploit this...

Malicious Package

Overview Version 1.1.3 of pensi-scheduler contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's...

Upgrading Crowd via XML Data Transfer reactivate disabled user from OpenLDAP - CVE-2019-20902

h3. Issue Summary Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. h3. Environment Crowd 3.x.x OpenLDAP h3. Steps to Reproduce Install Crowd 3.1.1 and connect with OpenLDAP directory. Synchronise the OpenLDAP directory. Disable one of the user from OpenLDAP...

Upgrading Crowd via XML Data Transfer reactivate disabled user from OpenLDAP - CVE-2019-20902

h3. Issue Summary Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. h3. Environment Crowd 3.x.x OpenLDAP h3. Steps to Reproduce Install Crowd 3.1.1 and connect with OpenLDAP directory. Synchronise the OpenLDAP directory. Disable one of the user from OpenLDAP...

[SECURITY] Fedora 29 Update: curl-7.61.1-11.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

[SECURITY] Fedora 30 Update: curl-7.64.0-7.fc30

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Rockwell Automation 1738-AENTR EtherNet/IP Adapter Communication Adapter

Binary data 752985.prm...

Rockwell Automation DeviceLink - mini to mini connector 1485D-A1M5-N4 Discrete I/O

Binary data 752707.prm...

Mitsubishi QJ71MES96N Communications Adapter Detection

Binary data 752161.prm...

Fedora Update for curl FEDORA-2018-7785911c9e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerabilities of OPC UA data transfer specification implementations in industrial networks, related to the execution of operations outside the buffer boundaries in memory, allow attackers to cause service failures.

The vulnerability of OPC UA data transfer specification implementations in industrial networks is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted request...

CVE-2019-9019

CVE-2019-9019 relates to the British Airways Entertainment System (installed on Boeing 777-36N(ER) and possibly others). The issue arises because the USB charging/data-transfer feature does not prevent interaction with connected USB keyboard/mouse devices, enabling physically proximate attackers ...

[SECURITY] Fedora 29 Update: curl-7.61.1-7.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...