F5 BIG-IP 代码注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A code injection vulnerability exists in BIG-IP, which is caused by improper resource management within TMM. The following...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in Libxml2

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in Libxml2. Vulnerability Details CVEID: CVE-2020-7595 DESCRIPTION: The Gnome Project Libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An...

F5 BIG-IP SSL Communication Handling Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing. A security vulnerability exists in the processing of F5 BIG-IP SSL communications, which can be exploited by remote attackers to submit a special request...

PT-2020-15685

Name of the Vulnerable Software and Affected Versions Arista CloudVision Portal versions prior to 2020.2 Description A vulnerability allows users with "read-only" or greater access rights to the Configlet Management module to download unauthorized files from the server by accessing a specific API...

CVE-2020-8340

A cross-site scripting XSS vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 Integrated Management Module 2, prior to version 5.60, embedded Baseboard Management Controller BMC web interface during an internal security review. This vulnerability could allow JavaScript code t...

CVE-2020-8340

A cross-site scripting XSS vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 Integrated Management Module 2, prior to version 5.60, embedded Baseboard Management Controller BMC web interface during an internal security review. This vulnerability could allow JavaScript code t...

PT-2020-20106

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.68n Description A cross-site scripting inclusion XSSI issue was found in the legacy IBM BladeCenter Advanced Management Module AMM web interface. This could allow an...

CVE-2020-8339: Insufficiently Protected Credentials

A cross-site scripting inclusion XSSI vulnerability was reported in the legacy IBM BladeCenter Advanced Management Module AMM web interface prior to version 3.68n BPET68N. This vulnerability could allow an authenticated user's AMM credentials to be disclosed if the user is convinced to visit a...

The vulnerability of the Data Management Module (DME) of the Cisco NX-OS network operating system, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Data Management Module DME of the Cisco NX-OS network operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

F5 BIG-IP UDP Request Denial of Service Vulnerability

The F5 BIG-IP is an F5 load balancing device. A security vulnerability exists in the F5 BIG-IP's handling of UDP protocol data, which can be exploited by a remote attacker to submit a special request that can cause the TMM to reboot, resulting in a denial-of-service attack...

CVE-2020-6871

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

CVE-2020-6871

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

Command Execution Vulnerability in SSH of UPS Management Module at VitiTech Ltd.

VitiTech is an uninterruptible power supply, automation control equipment and industrial battery company. A command execution vulnerability exists in SSH, the UPS management module of Verti Technologies Ltd. The vulnerability can be exploited to remotely execute system shell commands bypassing...

Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by multiple vulnerabilities in libssh2

Summary The following vulnerabilities in libssh2 have been addressed by IBM Integrated Management Module II IMM2. Vulnerability Details CVEID: CVE-2019-3857 DESCRIPTION: libssh2 could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow. By sending a...

CVE-2020-1117

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'...

CVE-2020-1117 Microsoft Color Management Remote Code Execution Vulnerability

...

CVE-2020-1117

CVE-2020-1117 affects the Color Management Module in Windows (ICM32.dll). FireEye’s analysis documents a heap-based overflow in icm32 occurring during InitNamedColorProfileData while parsing the ‘ncl2’ color-profile element, due to using an incorrect offset (0x51) for verification and advancing t...

CVE-2020-1117: Undefined Security Weakness

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data;...

Microsoft Color Management Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the handling of memory objects in the...

Microsoft Color Management Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data;...