Cross site scripting

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

Input validation

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15065

CVE-2020-15065 affects the DIGITUS DA-70254 4-Port Gigabit Network Hub (version 2.073.000.E0008). Connected sources describe an input validation error in the device that allows an on‑network attacker to cause a denial‑of‑service by sending excessively long input values. The vulnerability stems fr...

CVE-2020-15065

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values...

CVE-2020-15064

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...

CVE-2020-15064

The CVE-2020-15064 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware 2.073.000.E0008). Multiple connected sources confirm a stored XSS vulnerability in the web UI: an attacker on the same network can leverage administrative privileges to set a crafted server name, triggerin...

CVE-2020-15063

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter...

CVE-2020-15063

The CVE-2020-15063 entry concerns the DIGITUS DA-70254 4-Port Gigabit Network Hub (firmware version 2.073.000.E0008). The underlying issue is an authorization flaw that allows an attacker on the same network to bypass authentication via a web-management request that omits a password parameter. Pu...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15062

CVE-2020-15062 affects the DIGITUS DA-70254 4-Port Gigabit Network Hub (version 2.073.000.E0008). The root cause is that the admin password can be discovered by sniffing unencrypted UDP traffic on the same network, enabling privilege elevation. Documented impact includes attacker gaining administ...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Diagnostics Hub Standard Collector service for Windows operating systems allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the Diagnostics Hub Standard Collector for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

Veeam Support for Azure Stack Hub

Overview Veeam Backup & Replication supports backup and restore of workloads running on Azure Stack Hub using Veeam Agent for Microsoft Windows and Veeam Agent for Linux. These can be centrally managed with Veeam Backup & Replication. Restore operations are performed using the Direct Restore to...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux...

Microsoft Windows Diagnostics Hub Elevation of Privilege Vulnerability

Windows Server is the brand name of a series of server operating systems released by Microsoft, which includes all Windows operating systems released under the brand name "Windows Server". An elevation of privilege vulnerability exists in Microsoft Windows Diagnostics Hub, which arises from a...

CVE-2020-1418

An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1393...

CVE-2020-1393

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-141...

CVE-2020-1393

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-141...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-141...