CVE-2020-10384

MB CONNECT LINE MB CONNECT24/mmbCONNECT24 are affected by CVE-2020-10384: local privilege escalation from www-data to root in all versions up to 2.6.1. Mitigation: upgrade to version 2.71 or higher (as recommended by MB connect line); until patching, enable bruteforce detection and firewall prote...

CVE-2020-10383

The CVE-2020-10383 issue affects MB CONNECT LINE mbCONNECT24 and mymbCONNECT24 software up to version 2.5.0. The vulnerability is an unauthenticated remote code execution in the com_mb24sysapi module, allowing an attacker to execute arbitrary code remotely. Affected versions include mbCONNECT24 p...

CVE-2020-10383

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...

CVE-2020-10382

MB CONNECT LINE mbCONNECT24 and the in-house remote maintenance solution mymbCONNECT24 are affected up to version 2.5.0. The vulnerability is an authenticated remote code execution in the backup-scheduler, surfaced across multiple sources. Impact is code execution on the device hosting the backup...

CVE-2020-10382

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...

CVE-2020-10381

CVE-2020-10381 affects the MB CONNECT LINE software family (mymbCONNECT24 and mbCONNECT24) up to version 2.5.0. The vulnerability is an unauthenticated SQL injection in DATA24, allowing an attacker to discover database and table names. Practical impact is disclosure of schema information without ...

CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...

Cumulative Update 18 for Microsoft Dynamics 365 Business Central October'18 on-premises (Application Build 41909, Platform Build 41879)

None None...

PT-2020-12052 · Mb Connect Line · Mbconnect24

Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.5.0 mymbCONNECT24 versions through 2.5.0 Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software. There is an authenticated remote code execution in the backup-schedule...

cpp-httplib injection vulnerability

cpp-httplib is an HTTP/HTTPS server and client library written in C++. A security vulnerability exists in cpp-httplib version 0.5.8 and earlier, which stems from the program's failure to filter string-laden arguments passed to the 'setredirect' and 'setheader' functions. The vulnerability can be...

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

UBUNTU-CVE-2020-11709

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the setredirect and setheader functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts...

CVE-2020-6765

D-Link DSL-GS225 J1 AU1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET...

Privilege Escalation

qemu-kvm is vulnerable to privilege escalation. It was found that qemu-kvm did not properly drop supplemental group privileges when the root user started guests from the command line "/usr/libexec/qemu-kvm" with the "-runas" option. A qemu-kvm process started this way could use this flaw to gain...

Information Disclosure

encryptfs-utils is vulnerable to information disclosure. A disclosure flaw was found in the way the "ecryptfs-setup-private" script passed passphrases to the "ecryptfs-wrap-passphrase" and "ecryptfs-add-passphrase" commands as command line arguments. A local user could obtain the passphrases of...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the way Firefox handled certain command line URLs. If another application passed Firefox a malformed URL, it could result in Firefox executing local malicious content with chrome privileges...

CentOS 7 : libosinfo (RHSA-2020:1051)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1051 advisory. - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...

Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2

Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2 About the System Update Readiness Tool The System Update Readiness Tool can help fix problems that might prevent Windows updates and service packs from installing. For more information and how to download th...

CVE-2018-1002101

In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection...