4647 matches found
CVE-2020-9427
OX Guard 2.10.3 and earlier allows SSRF...
CVE-2020-9427
OX Guard 2.10.3 and earlier contains an SSRF vulnerability in the guard component. Affected product: Open-Xchange OX Guard (versions up to 2.10.3). Root cause: improper handling leading to Server-Side Request Forgery. Impact: as described in public advisories; exploit details are corroborated by ...
PT-2020-20651
Name of the Vulnerable Software and Affected Versions OX Guard versions 2.10.3 and earlier Description The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to unintended locations. Recommendations For OX Guard...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery Vulnerabilities
Exploit for php platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...
PT-2020-20650
Name of the Vulnerable Software and Affected Versions OX Guard versions 2.10.3 and earlier Description The issue allows for a Cross-Site Scripting XSS attack. Recommendations For OX Guard versions 2.10.3 and earlier, at the moment, there is no information about a newer version that contains a fix...
Researchers Expose a New Vulnerability in Intel's CPUs
The Software Guard eXtension is supposed to protect encryption keys and other sensitive data. But this isn't the first time it's been defeated...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery
Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.10.2-rev9, 2.10.3-rev4 Vendor notification...
Intel CPUs Vulnerable to New 'SGAxe' and 'CrossTalk' Side-Channel Attacks
Cybersecurity researchers have discovered two distinct attacks that could be exploited against modern Intel processors to leak sensitive information from the CPU's trusted execution environments TEE. Called SGAxe, the first of the flaws is an evolution of the previously uncovered CacheOut attack...
Important kernel security update: New kernel 2.6.32-042stab144.1; Virtuozzo 6.0 Update 12 Hotfix 51 (6.0.12-3757)
This update provides a new kernel 2.6.32-042stab144.1 for Virtuozzo 6.0. It is based on the RHEL 6.10 kernel 2.6.32-754.29.2.el6 and inherits security and stability fixes from it. The new kernel also provides internal security and stability fixes. Vulnerability id: CVE-2020-10711 Kernel: NetLabel...
HPESBHF03961 rev.1 - Certain HPE Servers with 6th Generation Intel Core Processors and greater supporting SGX and TXT, Local Disclosure of Privileged Information
Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to v1.8011-14-2019 HPE ProLiant m710x-L Server Blade - Prior to v1.8011-14-2019 CVSS Scores: | CVE | CVSS Vector | Base...
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
Impact Possible remote Denial of Service or Data Injection. Patches Patches are available in https://github.com/horazont/aioxmpp/pull/268. They have been backported to the 0.10 release series and 0.10.3 is the first release to contain the fix. Workarounds To make the bug exploitable, an error...
kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2020:1524 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CentOS 6 : kernel (RHSA-2020:1524)
The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1524 advisory. - The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocate...
CentOS: Security Advisory for kernel (CESA-2020:1524)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200422) (Stack Clash)
Security Fixes : - kernel: rtlp2pnoaie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow CVE-2019-17666 - kernel: offset2lib allows for the stack guard page to be jumped over CVE-2017-1000371 C Tenable Network Security...
The vulnerability of the “CSRF” cross-request mechanism in the GNU Privacy Guard (GnuPG) software for encrypting data and generating digital signatures allows attackers to carry out denial-of-service attacks.
The vulnerability of the “CSRF” mechanism used by the GNU Privacy Guard GnuPG software for encrypting data and generating digital signatures is related to deficiencies in the processing of authentication requests for applications. Exploiting this vulnerability can allow an attacker to carry out a...
kernel: offset2lib allows for the stack guard page to be jumped over
A flaw was found in the Linux kernel's implementation of mapping ELF PIE binary loading to allow evasion of the stack-guard page protection mechanisms that intend to mitigate this behavior. This issue appears to be limited to i386 based systems...
RHEL 6 : kernel (RHSA-2020:1524)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1524 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rtlp2pnoaie in...
