4436 matches found
CVE-2020-25619: Undefined Security Weakness
An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature port forwarding with a temporary key pair to access network services on the 127.0.0.1 interface, even though thi...
PT-2020-14696
Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.4.1F and below releases in the 4.21.x train Arista EOS X-Series versions 4.21.11M and below releases in the 4.21.x train Arista EOS versions 4.22.6M and below releases in the 4.22.x train Arista EOS versions 4.23.4M an...
PT-2020-16131
Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in the SSH component of SolarWinds N-Central, where it does not restrict the communication channel to intended endpoints. This allows an attacker to leverage an SSH...
SolarWinds N-Central Security Vulnerability
SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...
F5 Networks BIG-IP : F5 TMM vulnerability (K05204103)
An early syncookie leaks forwarding flows if the virtual server has Clustered Multiprocessing CMPdisabled and the BIG-IP AFM module is provisioned.CVE-2020-5950 Impact The BIG-IP system resources may be excessively consumed and potentially leadto a failover event.Traffic processing is disrupted...
SUSE SLES15 Security Update : slurm (SUSE-SU-2020:3505-1)
This update for slurm fixes the following issues : CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Note that Tenable Network...
Ksix Zigbee Devices Playback Protection Bypass
Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass PoC Date: 2020-11-15 Exploit Author: Alejandro Vazquez Vazquez Vendor Homepage: https://www.ksixmobile.com/ Firmware Version: Gateway Zigbee Module - v1.0.3, Gateway Main Module - v1.1.2, Door Sensor - v1.0.7, PIR Motion Sensor -...
Ksix Zigbee Devices Playback Protection Bypass Exploit
Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass PoC Exploit Author: Alejandro Vazquez Vazquez Vendor Homepage: https://www.ksixmobile.com/ Firmware Version: Gateway Zigbee Module - v1.0.3, Gateway Main Module - v1.1.2, Door Sensor - v1.0.7, PIR Motion Sensor - v1.0.12 Tested on:...
openSUSE Security Update : slurm (openSUSE-2020-2033)
This update for slurm fixes the following issues : - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...
openSUSE Security Update : slurm (openSUSE-2020-2056)
This update for slurm fixes the following issues : - Updated to 20.02.6 : - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. -...
Security update for slurm (important)
openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2056-1 Rating: important References: 1173805 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata is...
OPENSUSE-SU-2020:2056-1 Security update for slurm
This update for slurm fixes the following issues: - Updated to 20.02.6: CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Added...
OPENSUSE-SU-2020:2033-1 Security update for slurm
This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...
Security update for slurm (important)
openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2033-1 Rating: important References: 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...
SUSE-SU-2020:3506-1 Security update for slurm
This update for slurm fixes the following issues: - Updated to 20.02.6: CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Added...
SUSE-SU-2020:3505-1 Security update for slurm
This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...
November 19, 2020âKB4586839 (OS Build 17763.1613) Preview
None None...
HackerOne: Security@ email forwarding and Embedded Submission drafts can be used to obtain copy of deleted attachments from other HackerOne users
HackerOne has a number of ways for hackers to submit security vulnerabilities to a program, two of which are through an embedded submission form and through security@ email forwarding. These two features can be exploited to update a report draft created through security@ email forwarding that doe...
Cisco IOS XR Software Slow Path Forwarding Denial of Service Vulnerability
A vulnerability in the egress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers and Cisco Network Convergence System NCS 5000 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...
CVE-2020-15897: Undefined Security Weakness
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router...