3275 matches found
Moderate: Red Hat Security Advisory: Red Hat Decision Manager 7.9.0 security update
An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
Logaritmo Aware CallManager Information Disclosure Vulnerability
Logaritmo Aware CallManager is an enterprise telephone call management system. A security vulnerability exists in Logaritmo Aware CallManager version 2012, which originates in info.php and allows remote attackers to obtain sensitive information via a direct request to the phpinfo function...
CVE-2020-27180
konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter...
Arbitrary File Deletion Vulnerability in Nanjing Xindi EcoGod Windows Network Web Edition
Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition suffers from an arbitrary file deletion vulnerability, whi...
Code execution vulnerability in UCMS fi***.php file
UCMS is a content management system written in PHP. A code execution vulnerability exists in the UCMS fi.php file. An attacker can exploit the vulnerability to gain server privileges...
Directory Traversal Vulnerability in Advantech iView² SNMP Management Software Co***.class File
Advantech is a global leader in the intelligent systems industry. A directory traversal vulnerability exists in the Co.class file of the Advantech iView² SNMP management software. An attacker can exploit the vulnerability to access arbitrary files within the station and disclose sensitive...
GLPI Cross-Site Scripting Vulnerability (CNVD-2020-67240)
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
USN-4564-1 tika vulnerabilities
It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could use it to cause a denial of service crash. CVE-2020-1950, CVE-2020-1951...
Observium Directory Traversal and Local File Inclusion Vulnerability (CNVD-2020-6244)
Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from a directory traversal and local file inclusion vulnerability. The vulnerability stems from the ability to load any file with the...
OPENSUSE-SU-2020:1413-1 Security update for libjpeg-turbo
This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project...
CVE-2020-2043
An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple tim...
Command injection
An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...
Information disclosure
An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple tim...
CVE-2020-2044 PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history
An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...
CVE-2020-2044
CVE-2020-2044 is an information-exposure issue in PAN-OS where an administrator password or other sensitive data can be logged in cleartext in opcmdhistory.log. Affected PAN-OS versions: 8.1.x before 8.1.16; 9.0.x before 9.0.10; 9.1.x before 9.1.3. The log file design change moves command history...
CVE-2020-2043 PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs
An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple tim...
CVE-2020-2043
CVE-2020-2043: PAN-OS information exposure in configuration logs when the after-change-detail custom syslog field is enabled. The first occurrence of the sensitive field is masked, but subsequent instances are exposed in clear text. Affected: PAN-OS 8.1.x before 8.1.16; 9.0.x before 9.0.10; 9.1.x...
PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history
An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...