PT-2019-3149 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: FortiManager VM versions 6.2.0, 6.0.6 and below Description: The issue is due to insufficient input validation in the FortiManager VM application. This could allow a remote attacker to execute arbitrary code or commands. Additionally, the lac...

Digital Signature Checksum Bypass Vulnerability in Multiple Huawei Products

The Huawei AR1200, among others, is an enterprise router from Huawei, a Chinese company. A security vulnerability exists in multiple Huawei products, which stems from the program failing to properly verify the digital signature of the mirroring software. A local attacker could use this...

PT-2019-2033

Name of the Vulnerable Software and Affected Versions Huawei routers versions AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300, SRG3300 Description The issue is related to a digital signature verification bypass. It occurs because the affected software improperly...

The vulnerability of the systemd daemon in the Astra Linux operating system allows a hacker to circumvent the restrictions imposed by a given security policy.

The vulnerability of the systemd-based Astra Linux operating system is related to the absence of mandate-based integrity control during operations involving systemd. Exploiting this vulnerability allows an attacker to circumvent the restrictions imposed by the specified security policies...

Policy Compliance Adds UDC Support for Cloud Agent

Qualys is extending the Cloud Agent capabilities for users of the Policy Compliance PC application by letting them define controls. Until now, the Cloud Agent could only assess Qualys PC’s “out of the box” controls. By adding support for user defined controls UDC, Qualys PC users now can use Clou...

Binance 1.5.0 Insecure File Permission

Document Title: =============== Binance v1.5.0 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2135 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID: ====================================...

Binance v1.5.0 - Insecure File Permission Vulnerability

Document Title: =============== Binance v1.5.0 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2135 Release Date: ============= 2018-07-16 Vulnerability Laboratory ID VL-ID: ====================================...

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Suite Unauthorized Operation Vulnerabilities

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft...

Foxconn FEMTO AP-FC4064-T Weak Password Vulnerability

The Foxconn FEMTO AP-FC4064-T is a home base station device from Foxconn. A security vulnerability exists in the web administration page of the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 version, which stems from the admin account using a weak default password: admin, and the...

PHOENIX CONTACT mGuard Unauthorized Modification Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. An unauthorized modification vulnerability exists in the PHOENIX CONTACT mGuard. The mGuard device relies on an internal verification of the integrity of the update...

SuperBeam Injection Vulnerability

SuperBeam is an application that utilizes WiFi networks for file transfer between cell phones. The program uses QR codes or NFC for pairing and can share multiple file formats. A security vulnerability exists in SuperBeam 4.1.3 and earlier versions, which stems from the program's failure to use...

[SECURITY] Fedora 27 Update: optipng-0.7.6-5.fc27

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

Man-in-the-Middle (MitM)

deis is vulnerable to man-in-the-middle MITM attacks. The vulnerability exists due to the lack of secure connection, as well as the lack of integrity checks...

The vulnerability of the Microsoft Device Guard component in Windows operating systems allows a hacker to inject malicious code into Windows PowerShell sessions.

The vulnerability of the components used to protect the integrity of Microsoft Device Guard’s hardware and software on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to bypass integrity checks and...

Network Time Protocol Broadcast Mode Poll Interval Enforcement Denial of Service Vulnerability(CVE-2016-7428)

Summary An exploitable denial of service vulnerability exists in the broadcast mode poll interval enforcement functionality of ntpd. To limit abuse, ntpd restricts the rate at which each broadcast association will process incoming packets. ntpd will reject broadcast mode packets that arrive befor...

Infotecs ViPNet Client and Coordinator Privilege Access Control Vulnerability

Infotecs ViPNet Client and Coordinator are both products of Infotecs, a German company. Infotecs ViPNet Client is the client side of a software-based VPN solution; Coordinator is the server side. A security vulnerability exists in Infotecs ViPNet Client and Coordinator that stems from incorrect...

Design/Logic Flaw

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle...

CVE-2017-11130

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle...

IBM Security Guardium Security Bypass Vulnerability (CNVD-2017-19559)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security vulnerability exists in IBM Security Guardium tha...

CVE-2017-9606

Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...