4895 matches found
CVE-2020-7131
CVE-2020-7131 affects Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity on J/H-series NonStop systems. The issue arises from an open UDP port 17185 on the Maintenance LAN, enabling information disclosure, DoS, local memory corruption, and potentially full system contr...
CVE-2020-7131: Out-of-bounds Write
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
PT-2020-19393
Name of the Vulnerable Software and Affected Versions Blade Maintenance Entity versions J06.19.00 through J06.23.01 Integrated Maintenance Entity versions J06.19.00 through J06.23.01 Maintenance Entity affected versions not specified J/H-series NonStop systems affected versions not specified...
HPESBNS03996 rev.2 - HPE NonStop Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity, Multiple Remote Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information, local memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Integrated Maintenance Entity T1805 - T1805A01 through T1805A01^AAH Maintenance Entity T2805 - T2805A01 through T2805A01^AAU...
“We Need COBOL Programmers!” No, You Probably Don’t
Editor's note: While this topic isn't entirely security-specific, Trend Micro leader William Malik, has career expertise on the trending topic and shared his perspective. ---- There was a provocative report recently that the Governor of New Jersey told reporters that the state of New Jersey neede...
CVE-2020-11815
In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs without the Maintenance Mode setting...
CVE-2020-11815
In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs without the Maintenance Mode setting...
CVE-2020-11815: Unrestricted Upload of File with Dangerous Type
In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs without the Maintenance Mode setting...
PT-2020-12864
Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The issue allows attackers to upload arbitrary files to the server by modifying the content-type value, potentially leading to command execution on the server. This attack is only possible when the...
CVE-2020-2772
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Absence Recording, Maintenance. Supported versions that are affected are 12.2.6-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...
CVE-2020-2772
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Absence Recording, Maintenance. Supported versions that are affected are 12.2.6-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...
Monitoring and Maintaining Trend Micro Home Network Security – Part 4: Best Practices
We continue our four-part series on protecting your home and family. See the links to the previous parts at the end of this blog. We’re now done with familiarizing ourselves with the features of Trend Micro Home Network Security HNS It’s now time for you to get a bit more adept at regular...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by an attacke...
PT-2020-2119
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.6 through 12.2.9 Description The issue is related to inadequate access control in the Absence Recording and Maintenance components of Oracle Human Resources. It allows a low-privileged attacker with networ...
CVE-2020-2772: Undefined Security Weakness
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Absence Recording, Maintenance. Supported versions that are affected are 12.2.6-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...
Privilege Escalation
postgresql is vulnerable to privilege escalation. The vulnerability exists as an authenticated attacker could create an index function that would be executed with administrator privileges during database maintenance tasks, such as database vacuuming...
August 2016 update rollup for Windows Server 2012
August 2016 update rollup for Windows Server 2012 The August 2016 update rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this update rollup as part of your regular maintenance routines. Improvements and fixes To learn more about the...
CVE-2020-1639
When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance Ethernet OAM packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condition. This overflow condition in Juniper...
Principles of a Cloud Migration – From Step One to Done
Boiling the ocean with the subject, sous-vide deliciousness with the content. Cloud Migrations are happening every day. Analysts predict over 75% of mid-large enterprises will migrate a workload to the cloud by 2021 – but how can you make sure your workload is successful? There are not just facto...
