[SECURITY] Fedora 32 Update: dnf-plugins-core-4.0.18-1.fc32

Core Plugins for DNF. This package enhances DNF with builddep, config-manag er, copr, debug, debuginfo-install, download, needs-restarting, repoclosure, repograph, repomanage, reposync, changelog and repodiff commands. Additiona lly provides generatecompletioncache passive plugin...

PT-2020-4704

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.16 Description The issue is related to insufficient input validation in the shader generate main function of the Core component in Oracle VM VirtualBox. This can allow an attacker to gain unauthorized...

PT-2020-21843

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash issue was identified, characterized by a Segv on an unknown address. The crash involves the functions vips XYZ2Lab line, vips colour gen, and vips...

PT-2020-21773

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the generate inter prediction samples function, which is called by decode...

PT-2020-13348

Name of the Vulnerable Software and Affected Versions Yubico libykpiv versions prior to 2.1.0 Description An issue was discovered in the ykpiv util generate key function in lib/util.c, where incorrect error handling code can trigger an incorrect free. This could be used to cause a denial of servi...

PT-2020-22505

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. Technical details about the crash state include the functions vips foreign load gif render, vips foreign load gif next page, and vips forei...

CVE-2020-14010

The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q aka name parameter...

Werkzeug generate Unauthorized Access

The vulnerability of the generate function in the Werkzeug web application library’s init.py file is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data...

generate-gh-repo (1.1.0), generate-project (>=0.7.0, <=1.0.0) +1 more potentially affected by CVE-2020-7630 via git-add-remote (1.0.0)

git-add-remote NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-add-remote and may be impacted: - generate-gh-repo 1.1.0 - generate-project =0.7.0, =1.0.4, =1.0.6 Source cves: CVE-2020-7630 Source advisory: SNYK:JS-GITADDREMOTE-564...

CVE-2020-6196

SAP BusinessObjects Mobile MobileBIService, version 4.2, allows an attacker to generate multiple requests, using which he can block all the threads resulting in a Denial of Service...

CVE-2018-19441

An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secretkey values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to...

CVE-2020-0004

In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

UBUNTU-CVE-2019-19962

wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...

wolfSSL encryption issue vulnerability

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL versions prior to 4.3.0 that stems from the program failing to properly handle calls to the...

PT-2019-7135

Name of the Vulnerable Software and Affected Versions ace versions prior to 6.2.7+dfsg-2 Description The issue allows attackers to gain elevated privileges due to the generation of predictable file names in the /tmp directory by the generate doygen.pl script. Recommendations For versions prior to...

Google Android Information Disclosure Vulnerability (CNVD-2019-36404)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Google Android 9 and 10. The vulnerability stems from an account protection bypass issue caused by cache...

CVE-2019-2183

In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Hardcoded credentials

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

CVE-2019-13466: Use of Hard-coded Credentials

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

Centreon 19.04 - Remote Code Execution

!/usr/bin/python ''' Exploit Title: Centreon v19.04 authenticated Remote Code Execution Date: 28/06/2019 Exploit Author: Askar @mohammadaskar2 CVE : CVE-2019-13024 Vendor Homepage: https://www.centreon.com/ Software link: https://download.centreon.com Version: v19.04 Tested on: CentOS 7.6 / PHP...