CVE-2020-14334: Insufficiently Protected Credentials

A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance...

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application...

PT-2020-3466 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite 6 Description: The issue is related to inadequate access control in Red Hat Satellite, allowing a privileged attacker to read cache files. These cache credentials could help the attacker gain complete control of the Satellit...

Default credentials

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

CVE-2020-3330: Use of Hard-coded Credentials

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

PT-2020-3334

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to a buffer overflow in the Core component of Oracle VM VirtualBox,...

PT-2020-3107

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W Wireless-N VPN Firewall affected versions not specified Description The issue is related to the use of predefined credentials in the Telnet service of the Cisco Small Business RV110W Wireless-N VPN Firewall. This...

Capsule Technologies SmartLinx Neuron 2 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Low skill level to exploit/public exploits are available Vendor: Capsule Technologies Equipment: SmartLinx Neuron 2 Vulnerability: Protection Mechanism Failure 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

PT-2020-3251

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 19c Description The issue exists due to insufficient input validation in the Java VM component of Oracle Database Server. This allows a remote attacker to potentially gain full control over the...

Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking

A new research has uncovered multiple critical reverse RDP vulnerabilities in Apache Guacamole , a popular remote desktop application used by system administrators to access and manage Windows and Linux machines remotely. The reported flaws could potentially let bad actors achieve full control ov...

The vulnerability of Cisco IOS XE SD-WAN software, related to authentication flaws, allows a hacker to gain full control over the device.

The vulnerability of Cisco IOS XE SD-WAN software is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the device...

The vulnerability of the Core virtual network interface e1000 in the Oracle VM VirtualBox virtual machine allows a hacker to gain full control over the application.

The vulnerability of the e1000 network interface component in the Oracle VM VirtualBox virtual machine relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the VBoxVGA graphics controller component in the Oracle VM VirtualBox virtual machine allows a hacker to gain full control over the application.

The vulnerability of the VBoxVGA graphics controller in the Oracle VM VirtualBox virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Spring Framework component of the Oracle Retail Order Broker software product allows a hacker to gain full control over the application.

The vulnerability of the Spring Framework component of the Oracle Retail Order Broker product exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HTTP protocol...

The vulnerability of the software for configuring Schneider Electric Easergy Builder lies in the use of a less secure encryption algorithm, which allows an attacker to gain full access to the device.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to the use of a less secure encryption algorithm. Exploiting this vulnerability could allow an attacker to gain access to the user credentials of the device, thereby granting full control...

The vulnerability of the Security component of the Oracle Retail Store Inventory Management software allows a hacker to gain full control over the application.

The vulnerability of Oracle Retail Store Inventory Management’s Security component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain full control over the application.

The vulnerability of the Promotions component in Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the application using the HTTP protocol...