14017 matches found
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
Buffer overflow
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 is affected by a buffer overflow in the HTTP/S Bookmarks feature for clientless access, enabling remote code execution. Root cause is a flaw in the Bookmarks handling; affected component is the HTTP/S Bookmarks feature. Remediation: apply hotfix HF062020...
PT-2020-14161 · Sophos · Sophos Firewall
Name of the Vulnerable Software and Affected Versions: Sophos XG Firewall versions 17.x through v17.5 MR12 Description: The issue is related to a buffer overflow flaw in the HTTP/S Bookmarks feature for clientless access, allowing remote code execution. A hotfix, HF062020.1, has been published fo...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...
Bitrix24 Web Application Firewall Cross-Site Scripting Vulnerability
Bitrix24 is a suite of enterprise social platforms from Bitrix, USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management.Web Application Firewall is one of the Web Application Firewalls. A cross-site scripting vulnerability...
Security Bulletin: IBM Integration Bus affected by multiple Apache Tomcat vulnerabilities.
Summary IBM Integration Bus ships Apache Tomcat which is susceptible to vulnerabilities which were reported and have been addressed. Vulnerability Details CVEID: CVE-2020-1935 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by a flaw when handling unusual...
CVE-2020-13483
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
CVE-2020-13483
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
Cross site scripting
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
CVE-2020-13483
CVE-2020-13483 : Bitrix24 Web Application Firewall (WAF)
CVE-2020-13483
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
Ripple20 Vulnerability Mitigation Best Practices
ARCHIVED STORY Ripple20 Vulnerability Mitigation Best Practices By Kevin McGrath · June 22, 2020 On June 16th, the Department of Homeland Security and CISA ICS-CERT issued a critical security advisory warning covering multiple newly discovered vulnerabilities affecting Internet-connected devices...
Ripple20 Vulnerability Mitigation Best Practices
ARCHIVED STORY Ripple20 Vulnerability Mitigation Best Practices By Kevin McGrath · June 22, 2020 On June 16th, the Department of Homeland Security and CISA ICS-CERT issued a critical security advisory warning covering multiple newly discovered vulnerabilities affecting Internet-connected devices...
Sophos XG Firewall Buffer Overflow Vulnerability
Sophos XG Firewall is a next-generation endpoint protection and enterprise-class firewall product from Sophos UK. A buffer overflow vulnerability exists in the awarrensmtp component in Sophos XG Firewall 17.5 MR11 and prior versions. A remote attacker can exploit this vulnerability to execute...