373 matches found
CVE-2020-7269
Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense ATD prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deploy...
CVE-2020-7269 Sensitive Information Exposure in McAfee ATD
Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense ATD prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deploy...
PT-2021-12644 · Mcafee · Mcafee Advanced Threat Defense
Name of the Vulnerable Software and Affected Versions: McAfee Advanced Threat Defense ATD versions prior to 4.12.2 Description: The issue allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter in the web interface. The risk is...
CVE-2021-30127
TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but...
Sunflower Technology website builder system suffers from SQL injection vulnerability
Sunflower Technology, mainly engaged in government, enterprises and institutions Internet access project, computer network engineering, Zhengzhou website construction, Henan website construction, network office system development and application, e-commerce and Internet value-added services...
CVE-2020-29020 Reject Remote Management via Cellular UPLINK2
Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware...
Citrix SDWAN: Local internet breakout traffic is always been sent via Secondary link despite Primary link is up.
Customer has two WAN links bound to Internet Services. One link is Primary and another links is Secondary. The internet traffic is always going via Secondary WAN link despite Primary link is UP. Due to this, when Secondary link goes down, the internet access is getting lost for all the users...
Umbrella_android - Digital And Physical Security Advice App
Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a call/email;...
Denial of Service Vulnerability in GM220-S
China Mobile Communications Group is subordinate to China Mobile Communications Corporation. Its business scope includes: operating GSM digital mobile communications business; IP telephony business; Internet access service business, Internet backbone network data transmission business, and so on....
Command Execution Vulnerability in the Enable WF-1 Router
The Anlianbao WT-1 is a 4G router that combines multiple functions of wired and wireless router access and secure Internet access. A command execution vulnerability exists in the Anlianbao WF-1 router, which can be exploited by an attacker to gain server administration rights...
Smart DNS for the New Network: Optimizing Content Delivery
This is the third in a series of blog posts that will discuss how smart DNS resolvers can enhance ongoing internet service provider ISP and mobile network operator MNO network transformation efforts, such as the transition to 5G, better integration of Wi-Fi, and new network designs that optimize...
Oracle PeopleSoft Enterprise SCM eSupplier Connection Unspecified Vulnerability in eSupplier Connection
Oracle PeopleSoft Enterprise SCM eSupplier Connection is an Internet-based enterprise application from Oracle that provides supplier self-service. Oracle PeopleSoft Enterprise SCM eSupplier Connection A security vulnerability in version 9.2 of eSupplier Connection allows a low-privileged attacker...
Nessus Essentials with offline registration and plugin updates
In this episode, I would like to talk about Nessus Essentials and, in particular, how to register and update it without direct internet access. Nothing complicated, but there are a couple of pitfalls that I would like to share. Lets say you need to scan a host in a critical autonomous segment whe...
Visualize Visitor Prioritization in Real Time with mPulse
The internet has become one of the most important access points in our daily lives. Unexpected surges in demand can slow web pages and create service outages for unprepared websites. A poor user experience leads to dissatisfied customers, making it more critical than ever to visualize and control...
CVE-2020-15590
A vulnerability in the Private Internet Access PIA VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a “split tunnel” OpenVPN bypass option. Th...
Design/Logic Flaw
A vulnerability in the Private Internet Access PIA VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a “split tunnel” OpenVPN bypass option. Th...
CVE-2020-15590
A vulnerability in the Private Internet Access PIA VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a “split tunnel” OpenVPN bypass option. Th...
CVE-2019-20853
An issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet access to a service that has a remote code execution problem...