CVE-2019-5401

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

Cross site scripting

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

CVE-2019-5401

CVE-2019-5401 concerns HP 2910al-48G switches (firmware family W.15.14.0016) where an XSS vulnerability can be triggered by crafting the attack vector in switch persistent configuration fields (management URL, location, contact). The issue’s root cause is an input handling flaw that permits scrip...

CVE-2019-5401

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2019:1770-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : kernel-firmware (openSUSE-2019-1770)

This update for kernel-firmware fixes the following issues : kernel-firmware was updated to version 20190618 : - cavium: Add firmware for CNN55XX crypto driver. - linux-firmware: Update firmware file for Intel Bluetooth 22161 - linux-firmware: Update firmware file for Intel Bluetooth 9560 -...

OPENSUSE-SU-2019:1770-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: kernel-firmware was updated to version 20190618: cavium: Add firmware for CNN55XX crypto driver. linux-firmware: Update firmware file for Intel Bluetooth 22161 linux-firmware: Update firmware file for Intel Bluetooth 9560 linux-firmware:...

Security update for kernel-firmware (moderate)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2019:1770-1 Rating: moderate References: 1136334 1136498 1139383 Cross-References: CVE-2019-9836 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has two...

Iomega and LenovoEMC NAS Vulnerability - Lenovo Support US

No description provided...

SUSE-SU-2019:1803-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: kernel-firmware was updated to version 20190618: cavium: Add firmware for CNN55XX crypto driver. linux-firmware: Update firmware file for Intel Bluetooth 22161 linux-firmware: Update firmware file for Intel Bluetooth 9560 linux-firmware:...

SUSE-SU-2019:1802-1 Security update for kernel-firmware

This update for kernel-firmware aligns the firmware code with SUSE Linux Enterprise Server 15. The version is now at 20190618. Please refer to the kernel-firmware rpm changelog file to see the full history of changes...

Siemens TIA Portal - Remote Command Execution

Exploit Title: Siemens TIA Portal unauthenticated remote command execution Date: 06/11/2019 Exploit Author: Joseph Bingham CVE : CVE-2019-10915 Vendor Homepage: www.siemens.com Software Link: https://new.siemens.com/global/en/products/automation/industry-software/automation-software/tia-portal.ht...

SUSE-SU-2019:1792-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: kernel-firmware was updated to version 20190618: cavium: Add firmware for CNN55XX crypto driver. linux-firmware: Update firmware file for Intel Bluetooth 22161 linux-firmware: Update firmware file for Intel Bluetooth 9560 linux-firmware:...

Intel® SSD DC S4500/S4600 Series Advisory

Summary: A potential security vulnerability in Intel® Solid State Drives SSD for Data Centers DC S4500/S4600 Series firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18095 Description:...

Rockwell Automation PanelView 5510

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: PanelView 5510 Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated user to gain root privileges on the...

WolfVision Cynap 1.18g / 1.28j Hardcoded Credential

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-021 Product: Cynap Manufacturer: WolfVision Affected Versions: 1.18g, 1.28j Tested Versions: 1.18g, 1.28j Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-321 Risk Level: High Solution Status: Fixed Manufacturer...

D-Link Agrees to 10 Years of Security Audits to Settle FTC Charges

Taiwanese networking equipment manufacturer D-Link has agreed to implement a "comprehensive software security program" in order to settle a Federal Trade Commission FTC lawsuit alleging that the company didn't take adequate steps to protect its consumers from hackers. Your wireless router is the...

HPESBHF03943 rev.1 - Certain HPE Servers using AMD EPYC 7001 series Processors, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server All versions prior to v1.44 6/24/2019 HPE ProLiant DL325 Gen10 Server All versions prior to v1.44 6/24/2019 CVSS Scores: | CVE | CVSS Vector ...

BKS EBK Ethernet-Buskoppler Pro Shell Upload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-017 Product: BKS EBK Ethernet-Buskoppler Pro Manufacturer: BKS GmbH Affected Versions: 3.01 Vulnerability Type: Unrestricted Upload of File with Dangerous Type CWE-434 Risk Level: High Solution Status: Fixed Manufacturer...

About the security content of AirPort Base Station Firmware Update 7.9.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...